Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Release: Apple macOS 15.3 Clear all filters
TI-2025-17858 CVE-2025-24096 · GHSA-2wm4-qgw2-r6ff

Missing authorization in Apple macOS

Priority LOW 24

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00236 Published 2025-01-27 Fixed in 15.3 CWE-862
TI-2025-17906 CVE-2025-24150 · GHSA-qmjg-q5x7-48p2

Command injection in Apple Safari

Priority MEDIUM 45

A privacy issue was addressed with improved handling of files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0294 Published 2025-01-27 Partial fix · 18.3, 15.3 CWE-77
TI-2025-17897 CVE-2025-24140 · GHSA-w5x6-r7f6-w3x6

Incorrect default permissions in Apple macOS

Priority LOW 30

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00406 Published 2025-01-27 Fixed in 15.3 CWE-276
TI-2025-17900 CVE-2025-24143 · GHSA-23h9-xj7q-3m7r

Missing authorization in Apple Safari

Priority LOW 30

The issue was addressed with improved access restrictions to the file system.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00811 Published 2025-01-27 Partial fix · 18.3, 15.3 +1 CWE-862
TI-2025-17891 CVE-2025-24134 · GHSA-vv27-g57g-wgqp

Information disclosure in Apple macOS

Priority LOW 24

An information disclosure issue was addressed with improved privacy controls.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00264 Published 2025-01-27 Fixed in 15.3 CWE-200
TI-2025-17918 CVE-2025-24162 · GHSA-7jj7-mxgf-79rv

Out-of-bounds read in Apple Safari

Priority LOW 39

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0097 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-125
TI-2025-17892 CVE-2025-24135 · GHSA-h45h-fpr9-hqvw

Incorrect default permissions in Apple macOS

Priority LOW 35

This issue was addressed with improved message validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00216 Published 2025-01-27 Fixed in 15.3 CWE-276
TI-2025-17914 CVE-2025-24158 · GHSA-48xq-vmgv-hxqw

Cross-site scripting in Apple Safari

Priority LOW 32

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01357 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-79
TI-2025-17868 CVE-2025-24108 · GHSA-jhf5-fj8j-2h29

Missing authorization in Apple macOS

Priority LOW 24

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00246 Published 2025-01-27 Fixed in 15.3 CWE-862
TI-2025-17909 CVE-2025-24153 · GHSA-3q6v-mwhw-45h2

Buffer overflow in Apple macOS

Priority LOW 31

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00243 Published 2025-01-27 Fixed in 15.3 CWE-120