Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Total 15410 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-31197 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-06-17 N/A 5.7 MEDIUM
The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination.
CVE-2025-31196 1 Apple 2 Ipados, Macos 2026-06-17 N/A 5.5 MEDIUM
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.
CVE-2025-31195 1 Apple 1 Macos 2026-06-17 N/A 6.3 MEDIUM
The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.
CVE-2025-31194 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A Shortcut may run with admin privileges without authentication.
CVE-2025-31192 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 6.7 MEDIUM
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.
CVE-2025-31191 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 5.5 MEDIUM
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.
CVE-2025-31189 1 Apple 1 Macos 2026-06-17 N/A 8.2 HIGH
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to break out of its sandbox.
CVE-2025-31188 1 Apple 1 Macos 2026-06-17 N/A 7.8 HIGH
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences.
CVE-2025-31187 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.
CVE-2025-31186 1 Apple 1 Xcode 2026-06-17 N/A 3.3 LOW
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 16.3. An app may be able to bypass Privacy preferences.
CVE-2025-31185 1 Apple 2 Ipados, Iphone Os 2026-06-17 N/A 3.3 LOW
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3. Photos in the Hidden Photos Album may be viewed without authentication.
CVE-2025-31184 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-06-17 N/A 7.8 HIGH
This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. An app may gain unauthorized access to Local Network.
CVE-2025-31183 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 9.8 CRITICAL
The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data.
CVE-2025-31182 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-06-17 N/A 9.8 CRITICAL
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to delete files for which it does not have permission.
CVE-2025-30471 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-06-17 N/A 7.5 HIGH
A validation issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. A remote user may be able to cause a denial-of-service.
CVE-2025-30470 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 5.5 MEDIUM
A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to read sensitive location information.
CVE-2025-30469 1 Apple 2 Ipados, Iphone Os 2026-06-17 N/A 2.4 LOW
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen.
CVE-2025-30468 1 Apple 2 Ipados, Iphone Os 2026-06-17 N/A 6.5 MEDIUM
This issue was addressed through improved state management. This issue is fixed in iOS 26 and iPadOS 26. Private Browsing tabs may be accessed without authentication.
CVE-2025-30467 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 4.3 MEDIUM
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. Visiting a malicious website may lead to address bar spoofing.
CVE-2025-30466 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-06-17 N/A 9.8 CRITICAL
This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy.