Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-43270 1 Apple 4 Macos, Sequoia, Sonoma and 1 more 2026-04-02 8.8 High
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may gain unauthorized access to Local Network.
CVE-2025-43240 1 Apple 3 Macos, Safari, Sequoia 2026-04-02 6.2 Medium
A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.
CVE-2025-43229 1 Apple 3 Macos, Safari, Sequoia 2026-04-02 6.1 Medium
This issue was addressed through improved state management. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to universal cross site scripting.
CVE-2025-24188 1 Apple 3 Macos, Safari, Sequoia 2026-04-02 6.5 Medium
A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVE-2025-43267 1 Apple 2 Macos, Sequoia 2026-04-02 5.5 Medium
An injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. An app may be able to access sensitive user data.
CVE-2025-31280 1 Apple 2 Macos, Sequoia 2026-04-02 7.8 High
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6. Processing a maliciously crafted file may lead to heap corruption.
CVE-2025-43192 1 Apple 3 Macos, Sequoia, Sonoma 2026-04-02 9.8 Critical
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. Account-driven User Enrollment may still be possible with Lockdown Mode turned on.