Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

39 records

Release: Apple macOS 15.4 Clear all filters
TI-2025-21727 CVE-2025-30427 · GHSA-62f2-58pp-q2wg

Use after free in Apple Safari

Priority LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00833 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-416
TI-2025-18010 CVE-2025-24262 · GHSA-vccw-jcwc-p44p

Information disclosure in Apple macOS

Priority LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00261 Published 2025-03-31 Fixed in 15.4 CWE-200
TI-2025-17990 CVE-2025-24242 · GHSA-892g-82wc-7r8q

Link following in Apple macOS

Priority LOW 28

This issue was addressed with improved handling of symlinks.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00293 Published 2025-03-31 Fixed in 15.4 CWE-59
TI-2025-18028 CVE-2025-24281 · GHSA-6x3m-r98v-pgc4

Information disclosure in Apple macOS

Priority LOW 24

This issue was addressed with improved data protection.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00267 Published 2025-03-31 Fixed in 15.4 CWE-200
TI-2025-17987 CVE-2025-24239 · GHSA-x9p8-fww8-8frp

Information disclosure in Apple macOS

Priority LOW 30

A downgrade issue was addressed with additional code-signing restrictions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0055 Published 2025-03-31 Fixed in 15.4 CWE-200
TI-2025-21751 CVE-2025-30451 · GHSA-4r7q-g5mr-63x8

Information disclosure in Apple macOS

Priority LOW 24

This issue was addressed with improved redaction of sensitive information.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00243 Published 2025-03-31 Fixed in 15.4 CWE-200
TI-2025-17952 CVE-2025-24202 · GHSA-9r28-p42w-83mg

Improper access control in Apple iOS and iPadOS

Priority LOW 24

A logging issue was addressed with improved data redaction.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00265 Published 2025-03-31 Fixed in 18.4, 15.4 CWE-284
TI-2025-17964 CVE-2025-24214 · GHSA-m773-p743-chvm

Improper access control in Apple iOS and iPadOS

Priority LOW 25

A privacy issue was addressed by not logging contents of text fields.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-284
TI-2025-18011 CVE-2025-24263 · GHSA-f9vw-5v2f-5j5q

Information disclosure in Apple macOS

Priority MEDIUM 49

A privacy issue was addressed by moving sensitive data to a protected location.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00509 Published 2025-03-31 Fixed in 15.4 CWE-200
TI-2025-21726 CVE-2025-30426 · GHSA-7345-q82m-2h46

Information disclosure in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed with additional entitlement checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01235 Published 2025-03-31 Fixed in 18.4, 17.7.6 +3 CWE-200
TI-2025-17968 CVE-2025-24218 · GHSA-pph7-4r52-2m8q

Improper access control in Apple macOS

Priority LOW 24

A privacy issue was addressed with improved private data redaction for log entries.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0025 Published 2025-03-31 Fixed in 15.4 CWE-284
TI-2025-21730 CVE-2025-30430 · GHSA-xg7p-78j8-hfrp

Improper authentication in Apple iOS and iPadOS

Priority MEDIUM 51

This issue was addressed through improved state management.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-287
TI-2025-17934 CVE-2025-24182 · GHSA-q556-7cxr-pm34

Out-of-bounds read in Apple iOS and iPadOS

Priority LOW 25

An out-of-bounds read issue was addressed with improved input validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00294 Published 2025-03-31 Fixed in 18.4, 15.4 +2 CWE-125
TI-2025-17996 CVE-2025-24248 · GHSA-vjfx-mp69-qfw4

Improper access control in Apple macOS

Priority LOW 23

A permissions issue was addressed with additional restrictions.

CVSS 3.1MEDIUM 5.0 Adjacent network No auth No interaction EPSS 0.00421 Published 2025-03-31 Fixed in 15.4 CWE-284
TI-2025-21737 CVE-2025-30437 · GHSA-4rpr-22rq-29fr

Memory corruption in Apple macOS

Priority LOW 33

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00529 Published 2025-03-31 Fixed in 15.4 CWE-119
TI-2025-17959 CVE-2025-24209 · GHSA-j8gc-8grp-vffr

Buffer overflow in Apple Safari

Priority LOW 33

A buffer overflow issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00903 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +2 CWE-120
TI-2025-18012 CVE-2025-24264 · GHSA-7hxq-4w6w-xgc9

Uncontrolled resource consumption in Apple Safari

Priority MEDIUM 51

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2025-03-31 Partial fix · 18.4, 17.7.6 +3 CWE-400
TI-2025-21761 CVE-2025-30461 · GHSA-ghrr-554g-qqv5

Missing authorization in Apple macOS

Priority MEDIUM 50

An access issue was addressed with additional sandbox restrictions on the system pasteboards.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00676 Published 2025-03-31 Fixed in 15.4 CWE-862
TI-2025-17954 CVE-2025-24204 · GHSA-j34j-434j-r63c

Information disclosure in Apple macOS

Priority MEDIUM 53

The issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02292 Published 2025-03-31 Fixed in 15.4 CWE-200
TI-2025-17993 CVE-2025-24245 · GHSA-crwm-v9wf-m9pg

Missing authorization in Apple macOS

Priority MEDIUM 50

This issue was addressed by adding a delay between verification code attempts.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00664 Published 2025-03-31 Fixed in 15.4 CWE-862
Load more