Apple CVEs
4,637 CVEs and advisories name Apple as an affected vendor, 90 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-43412A file quarantine bypass was addressed with additional checks.
- CVE-2025-43500A privacy issue was addressed with improved handling of user preferences.
- CVE-2025-43445An out-of-bounds read was addressed with improved input validation.
- CVE-2025-43392The issue was addressed with improved handling of caches.
- CVE-2025-43405A permissions issue was addressed with additional sandbox restrictions.
- CVE-2025-43452This issue was addressed by restricting options offered on a locked device.
- CVE-2025-43444A permissions issue was addressed with additional restrictions.
- CVE-2025-43413An access issue was addressed with additional sandbox restrictions.
- CVE-2025-43385An out-of-bounds access issue was addressed with improved bounds checking.
- CVE-2025-43468A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions.
- CVE-2025-43429A buffer overflow was addressed with improved bounds checking.
- CVE-2025-43350A permissions issue was addressed with additional restrictions.
- CVE-2025-43409A permissions issue was addressed with additional sandbox restrictions.
- CVE-2025-43448This issue was addressed with improved validation of symlinks.
- CVE-2025-43389A privacy issue was addressed by removing the vulnerable code.
- CVE-2025-43433The issue was addressed with improved memory handling.
- CVE-2025-43425The issue was addressed with improved memory handling.
- CVE-2025-43472A validation issue was addressed with improved input sanitization.
- CVE-2025-43282A double free issue was addressed with improved memory management.
- CVE-2025-43313A logic issue was addressed with improved restrictions.
- CVE-2025-43280The issue was resolved by not loading remote images.
- CVE-2025-43281The issue was addressed with improved authentication.
- CVE-2025-43296A logic issue was addressed with improved validation.
- CVE-2025-43400An out-of-bounds write issue was addressed with improved bounds checking.
- CVE-2025-43332A file quarantine bypass was addressed with additional checks.
- CVE-2025-43298A parsing issue in the handling of directory paths was addressed with improved path validation.
- CVE-2025-43349An out-of-bounds write issue was addressed with improved input validation.
- CVE-2025-43308This issue was addressed with additional entitlement checks.
- CVE-2025-43328A permissions issue was addressed with additional restrictions.
- CVE-2025-43294An issue existed in the handling of environment variables.