Apple

macOS

2387 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-31266

  • EPSS 0.03%
  • Veröffentlicht 21.11.2025 21:22:24
  • Zuletzt bearbeitet 26.11.2025 14:32:34

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

4.3

CVE-2025-43374

  • EPSS 0.03%
  • Veröffentlicht 21.11.2025 21:22:23
  • Zuletzt bearbeitet 26.11.2025 14:32:59

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, watchOS 11.5. An attacker in physical prox...

5.5

CVE-2025-31248

  • EPSS 0.02%
  • Veröffentlicht 21.11.2025 21:22:22
  • Zuletzt bearbeitet 26.11.2025 14:32:25

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.5, macOS Sonoma 14.7.3. An app may be able to access sensitive user data.

8.8

CVE-2023-43000

  • EPSS 0.05%
  • Veröffentlicht 05.11.2025 18:33:23
  • Zuletzt bearbeitet 07.11.2025 18:00:06

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.

7.5

CVE-2025-43373

  • EPSS 0.04%
  • Veröffentlicht 04.11.2025 01:18:04
  • Zuletzt bearbeitet 04.11.2025 16:55:13

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

5.5

CVE-2025-43390

  • EPSS 0.01%
  • Veröffentlicht 04.11.2025 01:17:54
  • Zuletzt bearbeitet 04.11.2025 16:27:40

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to access user-sensitive data.

5.5

CVE-2025-43345

  • EPSS 0.01%
  • Veröffentlicht 04.11.2025 01:17:49
  • Zuletzt bearbeitet 04.11.2025 16:55:34

A correctness issue was addressed with improved checks. This issue is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7, visionOS 26, iOS 18.7 and iPadOS 18.7. An app may be able to access sensitive user data.

7.8

CVE-2025-43387

  • EPSS 0.01%
  • Veröffentlicht 04.11.2025 01:17:42
  • Zuletzt bearbeitet 04.11.2025 16:27:45

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2. A malicious app may be able to gain root privileges.

5.5

CVE-2025-43411

  • EPSS 0.01%
  • Veröffentlicht 04.11.2025 01:17:41
  • Zuletzt bearbeitet 04.11.2025 16:26:42

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to access user-sensitive data.

5.5

CVE-2025-43446

  • EPSS 0.02%
  • Veröffentlicht 04.11.2025 01:17:39
  • Zuletzt bearbeitet 04.11.2025 17:50:25

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to modify protected parts of the file system.