Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-43381This issue was addressed with improved handling of symlinks.
- CVE-2025-43513A permissions issue was addressed by removing the vulnerable code.
- CVE-2025-46285An integer overflow was addressed by adopting 64-bit timestamps.
- CVE-2025-43506A logic error was addressed with improved error handling.
- CVE-2025-43510A memory corruption issue was addressed with improved lock state checking.
- CVE-2025-43402The issue was addressed with improved memory handling.
- CVE-2025-43530This issue was addressed with improved checks.
- CVE-2025-46289A logic issue was addressed with improved file handling.
- CVE-2025-43463A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2025-43320The issue was addressed by adding additional logic.
- CVE-2025-43527A permissions issue was addressed with additional restrictions.
- CVE-2025-43511A use-after-free issue was addressed with improved memory management.
- CVE-2025-43497An access issue was addressed with additional sandbox restrictions.
- CVE-2025-43473This issue was addressed with improved state management.
- CVE-2025-46276An information disclosure issue was addressed with improved privacy controls.
- CVE-2025-43465A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2025-43520A memory corruption issue was addressed with improved memory handling.
- CVE-2025-43388An injection issue was addressed with improved validation.
- CVE-2025-43351A permissions issue was addressed with additional restrictions.
- CVE-2025-43516A session management issue was addressed with improved checks.
- CVE-2025-43404A permissions issue was addressed with additional sandbox restrictions.
- CVE-2025-43393A permissions issue was addressed with additional sandbox restrictions.
- CVE-2025-43517A privacy issue was addressed with improved private data redaction for log entries.
- CVE-2025-43464A denial-of-service issue was addressed with improved input validation.
- CVE-2025-43521A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.
- CVE-2025-31216The issue was addressed with improved checks.
- CVE-2025-31266A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name.
- CVE-2025-43374An out-of-bounds read was addressed with improved bounds checking.
- CVE-2025-31248A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2025-43515The issue was addressed by refusing external connections by default.