Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Release: Apple macOS 14.8.3, 15.7.3, 26.2 Clear all filters
TI-2025-28238 CVE-2025-43539 · GHSA-9qq6-c68f-xf3c

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 49

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06155 Published 2025-12-12 Fixed in 18.7.3, 26.2 +2 CWE-119
TI-2025-28220 CVE-2025-43519 · GHSA-rm5f-hw9v-gxx7

Incorrect default permissions in Apple macOS

Priority LOW 39

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-276
TI-2025-28120 CVE-2025-43416 · GHSA-xcmr-c479-3mcp

Improper access control in Apple macOS

Priority MEDIUM 49

A logic issue was addressed with improved restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00414 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-284
TI-2025-28184 CVE-2025-43482 · GHSA-c6hq-r2mm-58p4

Improper input validation in Apple macOS

Priority LOW 24

The issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00198 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-20
TI-2025-28231 CVE-2025-43532 · GHSA-9q9m-rgvw-p592

Buffer overflow in Apple iOS and iPadOS

Priority LOW 14

A memory corruption issue was addressed with improved bounds checking.

CVSS 3.1LOW 2.8 Local Low privileges User interaction EPSS 0.00274 Published 2025-12-12 Fixed in 18.7.3, 26.2 +2 CWE-120
TI-2025-28210 CVE-2025-43509 · GHSA-6239-3m7f-2j6j

Information disclosure in Apple macOS

Priority LOW 24

This issue was addressed with improved data protection.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00206 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-200
TI-2025-28214 CVE-2025-43513 · GHSA-cqf3-9crc-rw2h

Improper access control in Apple macOS

Priority LOW 24

A permissions issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00196 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-284
TI-2025-29037 CVE-2025-46285 · GHSA-p5pj-g9wc-c3v2

Integer overflow in Apple iOS and iPadOS

Priority LOW 35

An integer overflow was addressed by adopting 64-bit timestamps.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2025-12-12 Fixed in 18.7.3, 26.2 +2 CWE-190
TI-2025-28229 CVE-2025-43530 · GHSA-c4jm-jph7-8vhp

Information disclosure in Apple iOS and iPadOS

Priority LOW 24

This issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00218 Published 2025-12-12 Fixed in 18.7.3, 14.8.3 +2 CWE-200
TI-2025-29041 CVE-2025-46289 · GHSA-79fw-35w8-m7cx

Improper authorization in Apple macOS

Priority LOW 24

A logic issue was addressed with improved file handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00203 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-285
TI-2025-28217 CVE-2025-43516 · GHSA-g7qx-4r9v-657r

Session fixation in Apple macOS

Priority LOW 15

A session management issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00165 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-384
TI-2025-28218 CVE-2025-43517 · GHSA-f9j9-m66j-c8p5

Sensitive information in log files in Apple macOS

Priority LOW 15

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00179 Published 2025-12-12 Fixed in 14.8.3, 15.7.3 +1 CWE-532