Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

75 records

Release: Apple macOS 13.7.5, 14.7.5, 15.4 Clear all filters
TI-2025-21770 CVE-2025-30470 · GHSA-5qvg-xp2f-fp45

Path traversal in Apple iOS and iPadOS

Priority LOW 25

A path handling issue was addressed with improved logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00343 Published 2025-03-31 Fixed in 18.4, 13.7.5 +4 CWE-22
TI-2025-17983 CVE-2025-24235 · GHSA-2f88-2r9h-hx4p

Uncontrolled resource consumption in Apple macOS

Priority LOW 25

A memory initialization issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00497 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-400
TI-2025-17965 CVE-2025-24215 · GHSA-g3r7-w9gq-5v84

Improper access control in Apple iPadOS

Priority LOW 24

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00265 Published 2025-03-31 Fixed in 17.7.6, 13.7.5 +2 CWE-284
TI-2025-18002 CVE-2025-24254 · GHSA-6p7v-mm3j-hhhh

Improper privilege management in Apple macOS

Priority MEDIUM 42

This issue was addressed with improved validation of symlinks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00812 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-269
TI-2025-21750 CVE-2025-30450 · GHSA-h94q-fmqj-xgwh

Improper access control in Apple macOS

Priority LOW 24

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00267 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-284
TI-2025-22429 CVE-2025-31187 · GHSA-3cxf-3h44-8cxr

Improper access control in Apple macOS

Priority LOW 24

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00259 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-284
TI-2025-18025 CVE-2025-24278 · GHSA-jrgv-pmf9-6qg5

Link following in Apple macOS

Priority LOW 25

This issue was addressed with improved validation of symlinks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00285 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-59
TI-2025-21746 CVE-2025-30446 · GHSA-xcg2-pp7v-fm8f

Out-of-bounds write in Apple macOS

Priority LOW 31

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00923 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-787
TI-2025-22432 CVE-2025-31191 · GHSA-h2wh-36m8-j3rp

Information disclosure in Apple iOS and iPadOS

Priority LOW 25

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00469 Published 2025-03-31 Fixed in 18.4, 13.7.5 +3 CWE-200
TI-2025-18026 CVE-2025-24279 · GHSA-2w35-685f-3mpc

Information disclosure in Apple macOS

Priority LOW 21

This issue was addressed with improved file handling.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00545 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-200
TI-2025-18003 CVE-2025-24255 · GHSA-7xff-8wqr-949p

Improper input validation in Apple macOS

Priority LOW 38

A file access issue was addressed with improved input validation.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00284 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-20
TI-2025-17991 CVE-2025-24243 · GHSA-qm2f-w2gq-vqp6

Code injection in Apple iOS and iPadOS

Priority LOW 37

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00521 Published 2025-03-31 Fixed in 18.4, 17.7.6 +5 CWE-94
TI-2025-17982 CVE-2025-24234 · GHSA-56x3-c3f3-5345

Incorrect default permissions in Apple macOS

Priority LOW 36

This issue was addressed by removing the vulnerable code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00283 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-276
TI-2025-17924 CVE-2025-24170 · GHSA-p4vm-6crq-4pg4

Incorrect default permissions in Apple macOS

Priority LOW 36

A logic issue was addressed with improved file handling.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00264 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-276
TI-2025-18007 CVE-2025-24259 · GHSA-5cgr-6hjx-88v5

Improper access control in Apple iPadOS

Priority MEDIUM 50

This issue was addressed with additional entitlement checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00786 Published 2025-03-31 Fixed in 17.7.7, 13.7.5 +2 CWE-284
TI-2025-17992 CVE-2025-24244 · GHSA-f2wv-6cwg-48rq

Information disclosure in Apple iOS and iPadOS

Priority LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00322 Published 2025-03-31 Fixed in 18.4, 17.7.6 +4 CWE-200
TI-2025-17955 CVE-2025-24205 · GHSA-5jpr-cwj3-v74m

Improper access control in Apple iOS and iPadOS

Priority LOW 25

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2025-03-31 Fixed in 18.4, 17.7.6 +3 CWE-284
TI-2025-17977 CVE-2025-24229 · GHSA-g3v9-6xm2-qr9w

Improper access control in Apple macOS

Priority LOW 34

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00794 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-284
TI-2025-17913 CVE-2025-24157 · GHSA-8q4c-gc84-4w63

Buffer overflow in Apple macOS

Priority LOW 26

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00726 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-120
TI-2025-21760 CVE-2025-30460 · GHSA-wrwh-5f9j-74c6

Improper access control in Apple macOS

Priority LOW 34

A permissions issue was addressed by removing vulnerable code and adding additional checks.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00771 Published 2025-03-31 Fixed in 13.7.5, 14.7.5 +1 CWE-284
Load more