Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

31 records

Release: Apple macOS 14.8, 15.7, 26 Clear all filters
TI-2025-28039 CVE-2025-43332 · GHSA-c7qj-f5xm-w786

Improper access control in Apple macOS

Priority LOW 23

A file quarantine bypass was addressed with additional checks.

CVSS 3.1MEDIUM 5.2 Local Low privileges No interaction EPSS 0.00193 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-28006 CVE-2025-43298 · GHSA-pq58-cw5g-45jc

Apple macOS: An app may be able to gain root privileges

Priority LOW 36

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00245 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-41
TI-2025-28056 CVE-2025-43349 · GHSA-fgjx-3vj9-xp25

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 17

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00523 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-787
TI-2025-28016 CVE-2025-43308 · GHSA-r844-x6xg-5rfw

Improper access control in Apple macOS

Priority LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00402 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-28020 CVE-2025-43312 · GHSA-5pph-9cv8-8c6x

Buffer overflow in Apple macOS

Priority LOW 24

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00257 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-120
TI-2025-28059 CVE-2025-43353 · GHSA-7jw3-5j8w-xj2r

Out-of-bounds write in Apple macOS

Priority LOW 26

The issue was addressed with improved bounds checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00208 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-787
TI-2025-28012 CVE-2025-43304 · GHSA-g24q-v4rv-23cp

Race condition in Apple macOS

Priority LOW 32

A race condition was addressed with improved state handling.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00256 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-362
TI-2025-28013 CVE-2025-43305 · GHSA-9xj7-7mxv-j7xg

Improper access control in Apple macOS

Priority LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00223 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-27902 CVE-2025-43190 · GHSA-xh68-c6f3-2hjc

Path traversal in Apple iOS and iPadOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00269 Published 2025-09-15 Fixed in 26, 14.8 +1 CWE-22
TI-2025-28007 CVE-2025-43299 · GHSA-r2pq-fc8r-24vw

Improper input validation in Apple iOS and iPadOS

Priority LOW 24

A denial-of-service issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00233 Published 2025-09-15 Fixed in 18.7, 14.8 +2 CWE-20
TI-2025-28022 CVE-2025-43314 · GHSA-fgqg-r5jc-733f

Path traversal in Apple macOS

Priority LOW 24

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00248 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-22
TI-2025-28061 CVE-2025-43355 · GHSA-hc69-9v7q-3fw3

Type confusion in Apple iOS and iPadOS

Priority LOW 24

A type confusion issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00235 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-843
TI-2025-28010 CVE-2025-43302 · GHSA-5ffp-qrx5-4jmj

Out-of-bounds write in Apple iOS and iPadOS

Priority LOW 24

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00264 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-787
TI-2025-28064 CVE-2025-43358 · GHSA-83c5-rf2w-mm9m

Missing authorization in Apple iOS and iPadOS

Priority MEDIUM 40

A permissions issue was addressed with additional sandbox restrictions.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00302 Published 2025-09-15 Fixed in 18.7, 26 +2 CWE-862
TI-2025-28027 CVE-2025-43319 · GHSA-jc9g-5gh3-r4j6

Improper access control in Apple macOS

Priority LOW 24

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00223 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-28023 CVE-2025-43315 · GHSA-hcw8-8gq9-9jp7

Improper access control in Apple macOS

Priority LOW 24

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00213 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-28001 CVE-2025-43293 · GHSA-5pmf-5g54-cxhc

Improper input validation in Apple macOS

Priority LOW 24

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00233 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-20
TI-2025-27993 CVE-2025-43285 · GHSA-p3rw-4fmh-99jq

Improper access control in Apple macOS

Priority LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00344 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-27994 CVE-2025-43286 · GHSA-jhx4-xxm9-cpgx

Missing authorization in Apple macOS

Priority LOW 35

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-862
TI-2025-28029 CVE-2025-43321 · GHSA-gmc2-8cvc-xrmc

Improper access control in Apple macOS

Priority LOW 24

The issue was resolved by blocking unsigned services from launching on Intel Macs.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00223 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-22504 CVE-2025-31268 · GHSA-j59p-wg26-hq42

Improper access control in Apple macOS

Priority LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00213 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
TI-2025-27999 CVE-2025-43291 · GHSA-c8pj-gmjm-w829

Improper access control in Apple macOS

Priority LOW 24

A permissions issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00218 Published 2025-09-15 Fixed in 14.8, 15.7 +1 CWE-284
Load more