Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-43018 State: PUBLISHED Published: 2025-07-30T14:31:18.650Z Last Updated: 2025-07-30T14:45:36.382Z Vendors: HP, Inc. Products: Certain HP LaserJet Pro Printers Problem Types: CWE-200 Description: Certain HP LaserJet Pro printers may be vulnerable to information disclosure when a non-authenticated user queries a device’s local address book. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12807011-12807034-16/hpsbpi04040
CVE ID: CVE-2025-43019 State: PUBLISHED Published: 2025-07-08T15:25:34.337Z Last Updated: 2025-07-08T15:35:59.639Z Vendors: HP Inc. Products: HP Support Assistant Problem Types: CWE-269 Description: A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12715930-12715980-16/hpsbgn04031
CVE ID: CVE-2025-43020 State: PUBLISHED Published: 2025-07-22T23:01:09.020Z Last Updated: 2025-07-23T19:58:42.413Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-78 Description: A potential command injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.2. The vulnerability could allow a privileged user to submit arbitrary input. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43021 State: PUBLISHED Published: 2025-07-22T23:03:32.074Z Last Updated: 2025-07-23T20:09:03.981Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-1393 Description: A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43022 State: PUBLISHED Published: 2025-07-22T23:05:24.070Z Last Updated: 2025-07-23T20:10:32.249Z Vendors: HP Inc. Products: Poly Clariti Manager Problem Types: CWE-89 Description: A potential SQL injection vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow a privileged user to execute SQL commands. HP has addressed the issue in the latest software update. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12781425-12781447-16/hbsbpy04037
CVE ID: CVE-2025-43023 State: PUBLISHED Published: 2025-07-28T17:46:46.398Z Last Updated: 2025-11-04T21:10:27.277Z Vendors: HP, Inc. Products: HP Linux Imaging and Printing Software Problem Types: CWE-347 Description: A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm (DSA). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_12804224-12804228-16/hpsbpi04033
CVE ID: CVE-2025-43024 State: PUBLISHED Published: 2025-10-27T23:11:35.638Z Last Updated: 2025-10-28T14:57:56.715Z Vendors: HP Inc Products: ThinPro 8.1 Problem Types: CWE-497 Description: A GUI dialog of an application allows to view what files are in the file system without proper authorization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13164593-13164617-16/hpsbhf04066
CVE ID: CVE-2025-43025 State: PUBLISHED Published: 2025-07-02T19:43:46.888Z Last Updated: 2025-07-02T20:08:18.601Z Vendors: HP Inc. Products: Universal Print Driver Problem Types: CWE-121 Description: HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older (e.g., v7.3.x, v7.2.x, v7.1.x, etc.). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12690576-12690598-16/hpsbpi04032
CVE ID: CVE-2025-43026 State: PUBLISHED Published: 2025-06-05T19:41:30.538Z Last Updated: 2025-06-11T04:01:29.354Z Vendors: HP, Inc. Products: HP Support Assistant Problem Types: CWE-281 Description: A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12617979-12618008-16/hpsbgn04022
CVE ID: CVE-2025-43027 State: PUBLISHED Published: 2025-10-30T14:12:27.918Z Last Updated: 2025-10-31T03:55:30.389Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Genetec Inc. Products: Genetec Security Center Problem Types: CWE-284 Description: A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this vulnerability has been exploited in the wild. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://r
vulnerability has been exploited in the wild. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://resources.genetec.com/security-advisories/critical-security-vulnerability-affecting-the-alpr-manager-role-of-security-center - https://ressources.genetec.com/avis-de-securite/faille-de-securite-critique-affectant-le-role-gestionnaire-rapi-de-security-center
CVE ID: CVE-2025-43079 State: PUBLISHED Published: 2025-11-10T17:10:31.066Z Last Updated: 2025-11-18T11:41:11.636Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Qualys Inc Products: Qualys Agent Problem Types: CWE-426 Description: The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges (e.g., via sudo) in an environment where $PATH has been manipulated, an attacker with root/sudo privileges could cause malicious exe
udo) in an environment where $PATH has been manipulated, an attacker with root/sudo privileges could cause malicious executables to be run in place of the intended system binaries. This behavior can be leveraged for local privilege escalation and arbitrary command execution under elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qualys.com/security-advisories/cve-2025-43079
CVE ID: CVE-2025-43184 State: PUBLISHED Published: 2025-07-29T23:28:56.224Z Last Updated: 2025-11-03T19:59:10.030Z Vendors: Apple Products: macOS Problem Types: A shortcut may be able to bypass sensitive Shortcuts app settings Description: This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.4. A shortcut may be able to bypass sensitive Shortcuts app settings. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/122373 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43185 State: PUBLISHED Published: 2025-07-29T23:35:15.041Z Last Updated: 2025-11-03T19:59:11.412Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149
CVE ID: CVE-2025-43186 State: PUBLISHED Published: 2025-07-29T23:36:02.077Z Last Updated: 2025-11-03T19:59:19.684Z Vendors: Apple Products: macOS, tvOS, visionOS, watchOS, iOS and iPadOS Problem Types: Parsing a file may lead to an unexpected app termination Description: The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, macOS Ventura 13.7.7. Parsing a file may lead to an unexpected app termination. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/1
hment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124153 - https://support.apple.com/en-us/124154 - https://support.apple.com/en-us/124155 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124147 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43187 State: PUBLISHED Published: 2025-08-29T00:28:52.591Z Last Updated: 2025-11-03T19:59:23.790Z Vendors: Apple Products: macOS Problem Types: Running an hdiutil command may unexpectedly execute arbitrary code Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.6. Running an hdiutil command may unexpectedly execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43188 State: PUBLISHED Published: 2025-07-29T23:35:02.331Z Last Updated: 2025-11-03T19:59:25.152Z Vendors: Apple Products: macOS Problem Types: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149
CVE ID: CVE-2025-43189 State: PUBLISHED Published: 2025-07-29T23:29:09.625Z Last Updated: 2025-11-03T19:59:27.992Z Vendors: Apple Products: macOS Problem Types: A malicious app may be able to read kernel memory Description: This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150
CVE ID: CVE-2025-43190 State: PUBLISHED Published: 2025-09-15T22:35:42.086Z Last Updated: 2025-11-04T01:17:43.947Z Vendors: Apple Products: macOS, iOS and iPadOS, visionOS, watchOS Problem Types: An app may be able to access sensitive user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, visionOS 26, macOS Sequoia 15.7. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125112 - https://support.apple.com/en-us/125108 - https://support
ntainer: References: - https://support.apple.com/en-us/125112 - https://support.apple.com/en-us/125108 - https://support.apple.com/en-us/125115 - https://support.apple.com/en-us/125116 - https://support.apple.com/en-us/125111
CVE ID: CVE-2025-43191 State: PUBLISHED Published: 2025-07-29T23:54:55.593Z Last Updated: 2025-11-03T19:59:32.134Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause a denial-of-service Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43192 State: PUBLISHED Published: 2025-07-29T23:28:58.246Z Last Updated: 2025-11-03T19:59:34.862Z Vendors: Apple Products: macOS Problem Types: Account-driven User Enrollment may still be possible with Lockdown Mode turned on Description: A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. Account-driven User Enrollment may still be possible with Lockdown Mode turned on. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150
CVE ID: CVE-2025-43193 State: PUBLISHED Published: 2025-07-29T23:29:05.220Z Last Updated: 2025-11-03T19:59:38.949Z Vendors: Apple Products: macOS Problem Types: An app may be able to cause a denial-of-service Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to cause a denial-of-service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43194 State: PUBLISHED Published: 2025-07-29T23:35:24.346Z Last Updated: 2025-11-03T19:59:43.031Z Vendors: Apple Products: macOS Problem Types: An app may be able to modify protected parts of the file system Description: The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43195 State: PUBLISHED Published: 2025-07-29T23:35:37.194Z Last Updated: 2025-11-03T19:59:47.189Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43196 State: PUBLISHED Published: 2025-07-29T23:54:35.368Z Last Updated: 2025-11-03T19:59:51.272Z Vendors: Apple Products: macOS Problem Types: An app may be able to gain root privileges Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to gain root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43197 State: PUBLISHED Published: 2025-07-29T23:54:45.867Z Last Updated: 2025-11-03T19:59:55.427Z Vendors: Apple Products: macOS Problem Types: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access sensitive user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43198 State: PUBLISHED Published: 2025-07-29T23:35:28.810Z Last Updated: 2025-11-03T19:59:58.163Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150
CVE ID: CVE-2025-43199 State: PUBLISHED Published: 2025-07-29T23:35:34.190Z Last Updated: 2025-11-03T20:00:06.407Z Vendors: Apple Products: macOS Problem Types: A malicious app may be able to gain root privileges Description: A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app may be able to gain root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43200 State: PUBLISHED Published: 2025-06-16T21:36:25.578Z Last Updated: 2025-10-29T13:02:01.640Z Vendors: Apple Products: iOS and iPadOS, macOS, iPadOS, watchOS, visionOS Problem Types: A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. Description: This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and
and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed when processing a maliciously crafted photo or video shared via an iCloud Link. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122346 - https://support.apple.com/en-us/122901 - https://support.apple.com/en-us/122900 - https://support.apple.com/en-us/122173 - https://support.apple.com/en-us/122903 - https://support.apple.com/en-
122900 - https://support.apple.com/en-us/122173 - https://support.apple.com/en-us/122903 - https://support.apple.com/en-us/122345 - https://support.apple.com/en-us/122902 - https://support.apple.com/en-us/122174 - https://support.apple.com/en-us/122904
CVE ID: CVE-2025-43201 State: PUBLISHED Published: 2025-08-15T21:58:14.676Z Last Updated: 2025-08-21T00:27:22.341Z Vendors: Apple Products: Apple Music Classical for Android Problem Types: An app may be able to unexpectedly leak a user's credentials Description: This issue was addressed with improved checks. This issue is fixed in Apple Music Classical 2.3 for Android. An app may be able to unexpectedly leak a user's credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/124156
CVE ID: CVE-2025-43203 State: PUBLISHED Published: 2025-09-15T22:34:26.655Z Last Updated: 2025-11-04T01:15:26.592Z Vendors: Apple Products: iOS and iPadOS Problem Types: An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note Description: The issue was addressed with improved handling of caches. This issue is fixed in iOS 26 and iPadOS 26, iOS 18.7 and iPadOS 18.7. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125108 - https://
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125108 - https://support.apple.com/en-us/125109
CVE ID: CVE-2025-43204 State: PUBLISHED Published: 2025-09-15T22:35:03.926Z Last Updated: 2025-11-03T18:09:39.194Z Vendors: Apple Products: macOS Problem Types: An app may be able to break out of its sandbox Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125110
CVE ID: CVE-2025-43205 State: PUBLISHED Published: 2025-11-12T00:20:52.053Z Last Updated: 2025-11-13T20:50:10.643Z Vendors: Apple Products: watchOS, tvOS, iOS and iPadOS, visionOS Problem Types: An app may be able to bypass ASLR Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/122376 - https://support.apple.com/en-us/122377 - https://support.apple.com/en-us/122371 - https://support.apple.com/en-us/122378
CVE ID: CVE-2025-43206 State: PUBLISHED Published: 2025-07-29T23:54:43.542Z Last Updated: 2025-11-03T20:00:11.350Z Vendors: Apple Products: macOS Problem Types: An app may be able to access protected user data Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. An app may be able to access protected user data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/124149 - https://support.apple.com/en-us/124150 - https://support.apple.com/en-us/124151
CVE ID: CVE-2025-43207 State: PUBLISHED Published: 2025-09-15T22:35:11.008Z Last Updated: 2025-11-03T18:09:40.152Z Vendors: Apple Products: macOS Problem Types: An app may be able to access user-sensitive data Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125110
CVE ID: CVE-2025-43208 State: PUBLISHED Published: 2025-09-15T22:34:57.218Z Last Updated: 2025-11-03T18:09:41.378Z Vendors: Apple Products: macOS Problem Types: An app may be able to read sensitive location information Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location information. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.apple.com/en-us/125110
CVE ID: CVE-2025-43209 State: PUBLISHED Published: 2025-07-29T23:35:27.601Z Last Updated: 2025-11-03T20:00:19.886Z Vendors: Apple Products: iPadOS, macOS, tvOS, visionOS, watchOS, iOS and iPadOS Problem Types: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, iPadOS 17.7.9, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sonoma 14.7.7, watchOS 11.6, visionOS 2.6, macOS Ventura 13.7.7. Processing maliciously crafted web content may lead to an unexpected Safari crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai