Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

32 records

Release: Apple macOS 13.7.7, 14.7.7, 15.6 Clear all filters
TI-2025-27903 CVE-2025-43191 · GHSA-mjh8-7hvm-hc8h

Path traversal in Apple macOS

Priority LOW 27

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00257 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-22
TI-2025-27909 CVE-2025-43197 · GHSA-88q4-f452-83gj

Incorrect authorization in Apple macOS

Priority LOW 18

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.0021 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-863
TI-2025-27918 CVE-2025-43206 · GHSA-xq58-vxq6-5xw5

Path traversal in Apple macOS

Priority LOW 18

A parsing issue in the handling of directory paths was addressed with improved path validation.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00245 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-22
TI-2025-27908 CVE-2025-43196 · GHSA-h6jx-w6h6-hmpp

Path traversal in Apple macOS

Priority LOW 36

A path handling issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00261 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-22
TI-2025-27945 CVE-2025-43233 · GHSA-rqrw-v36p-whrj

Improper access control in Apple macOS

Priority MEDIUM 50

This issue was addressed with improved access restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00767 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-284
TI-2025-27898 CVE-2025-43186 · GHSA-j2g9-g34g-3vxh

Memory corruption in Apple iOS and iPadOS

Priority MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01268 Published 2025-07-29 Fixed in 18.6, 13.7.7 +4 CWE-119
TI-2025-27958 CVE-2025-43247 · GHSA-c7jg-879m-v859

Incorrect permission assignment in Apple macOS

Priority LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00526 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-732
TI-2025-27979 CVE-2025-43270 · GHSA-8px2-wmjq-q425

Improper access control in Apple macOS

Priority LOW 39

An access issue was addressed with additional sandbox restrictions.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00225 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-284
TI-2025-27976 CVE-2025-43266 · GHSA-jgr8-94f3-hp4c

Incorrect permission assignment in Apple macOS

Priority LOW 25

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.0022 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-732
TI-2025-27961 CVE-2025-43250 · GHSA-g8v4-9frj-vr9f

Path traversal in Apple macOS

Priority LOW 18

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00247 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-22
TI-2025-27956 CVE-2025-43245 · GHSA-2pfp-4m5x-6qw6

Authentication bypass by spoofing in Apple macOS

Priority MEDIUM 50

A downgrade issue was addressed with additional code-signing restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00735 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-290
TI-2025-27907 CVE-2025-43195 · GHSA-q38c-47vv-2gfm

Improper input validation in Apple macOS

Priority LOW 24

An issue existed in the handling of environment variables.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00215 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-20
TI-2025-27960 CVE-2025-43249 · GHSA-q342-653j-6h3r

Improper privilege management in Apple macOS

Priority LOW 35

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00226 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-269
TI-2025-27911 CVE-2025-43199 · GHSA-5p5p-mhp6-2375

Improper privilege management in Apple macOS

Priority MEDIUM 44

A permissions issue was addressed by removing the vulnerable code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00789 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-269
TI-2025-27944 CVE-2025-43232 · GHSA-4xwv-qhqg-x59m

Improper access control in Apple macOS

Priority MEDIUM 50

A permissions issue was addressed with additional restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00778 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-284
TI-2025-27921 CVE-2025-43209 · GHSA-fjxj-4w75-9x8h

Out-of-bounds write in Apple iOS and iPadOS

Priority MEDIUM 51

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01004 Published 2025-07-29 Fixed in 18.6, 17.7.9 +5 CWE-787
TI-2025-27906 CVE-2025-43194 · GHSA-x5j6-j5mc-fhg5

Improper access control in Apple macOS

Priority MEDIUM 50

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00789 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-284
TI-2025-27955 CVE-2025-43244 · GHSA-3w9q-v2w9-rrmm

Race condition in Apple macOS

Priority MEDIUM 50

A race condition was addressed with improved state handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-362
TI-2025-27983 CVE-2025-43275 · GHSA-crj5-hvmf-x76c

Race condition in Apple macOS

Priority MEDIUM 44

A race condition was addressed with additional validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-362
TI-2025-22481 CVE-2025-31243 · GHSA-qh68-q24j-hfmf

Improper privilege management in Apple macOS

Priority LOW 35

A permissions issue was addressed with additional restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00221 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-269
TI-2025-27971 CVE-2025-43261 · GHSA-3prx-m3mm-fp9r

Protection mechanism failure in Apple macOS

Priority MEDIUM 50

A logic issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00829 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-693
TI-2025-27932 CVE-2025-43220 · GHSA-vch4-7x67-5j92

Link following in Apple iPadOS

Priority MEDIUM 51

This issue was addressed with improved validation of symlinks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00886 Published 2025-07-29 Fixed in 17.7.9, 13.7.7 +2 CWE-59
TI-2025-27953 CVE-2025-43241 · GHSA-pcpc-22gx-2w2v

Improper access control in Apple macOS

Priority LOW 24

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00213 Published 2025-07-29 Fixed in 13.7.7, 14.7.7 +1 CWE-284
Load more