deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-43394
Published: 2025-11-04
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43395
Published: 2025-11-04
Description: This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43396
Published: 2025-11-04
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A sandboxed app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43397
Published: 2025-11-04
Description: A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43398
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43399
Published: 2025-11-04
Description: This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-359
References: https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635
CVE: CVE-2025-43401
Published: 2025-11-04
Description: A denial-of-service issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A remote attacker may be able to cause a denial-of-service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43405
Published: 2025-11-04
Description: A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-359
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43407
Published: 2025-11-04
Description: This issue was addressed with improved entitlements. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. An app may be able to break out of its sandbox.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635
CVE: CVE-2025-43408
Published: 2025-11-04
Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An attacker with physical access may be able to access contacts from the lock screen.
CVSS Score: 2.4 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43409
Published: 2025-11-04
Description: A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-359
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635
CVE: CVE-2025-43411
Published: 2025-11-04
Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43412
Published: 2025-11-04
Description: A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to break out of its sandbox.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43413
Published: 2025-11-04
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A sandboxed app may be able to observe system-wide network connections.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-693
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635
CVE: CVE-2025-43414
Published: 2025-11-04
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43419
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to memory corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125113
CVE: CVE-2025-43420
Published: 2025-11-04
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43421
Published: 2025-11-04
Description: Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125638
CVE: CVE-2025-43422
Published: 2025-11-04
Description: The issue was addressed by adding additional logic. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a device may be able to disable Stolen Device Protection.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-288
References: https://support.apple.com/en-us/125632
CVE: CVE-2025-43423
Published: 2025-11-04
Description: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Tahoe 26.1, visionOS 26.1. An attacker with physical access to an unlocked device paired with a Mac may be able to view sensitive user information in system logging.
CVSS Score: 2.0 (LOW)
CWE: CWE-532
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43424
Published: 2025-11-04
Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. A malicious HID device may cause an unexpected process crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634
CVE: CVE-2025-43425
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43426
Published: 2025-11-04
Description: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634
CVE: CVE-2025-43427
Published: 2025-11-04
Description: This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-703
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43429
Published: 2025-11-04
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43430
Published: 2025-11-04
Description: This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-703
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43431
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43432
Published: 2025-11-04
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-416
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43433
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to memory corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43434
Published: 2025-11-04
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-416
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43435
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43436
Published: 2025-11-04
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to enumerate a user's installed apps.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43438
Published: 2025-11-04
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-416
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43439
Published: 2025-11-04
Description: A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, visionOS 26.1. An app may be able to fingerprint the user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-359
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125638
CVE: CVE-2025-43440
Published: 2025-11-04
Description: This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43441
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43442
Published: 2025-11-04
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to identify what other apps a user has installed.
CVSS Score: 3.3 (LOW)
CWE: CWE-276
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633
CVE: CVE-2025-43443
Published: 2025-11-04
Description: This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43444
Published: 2025-11-04
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to fingerprint the user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43445
Published: 2025-11-04
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43446
Published: 2025-11-04
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636
CVE: CVE-2025-43447
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-119
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125638
CVE: CVE-2025-43448
Published: 2025-11-04
Description: This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43449
Published: 2025-11-04
Description: The issue was addressed with improved handling of caches. This issue is fixed in iOS 26.1 and iPadOS 26.1. A malicious app may be able to track users between installs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://support.apple.com/en-us/125632
CVE: CVE-2025-43450
Published: 2025-11-04
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to learn information about the current camera view before being granted camera access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633
CVE: CVE-2025-43452
Published: 2025-11-04
Description: This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26.1 and iPadOS 26.1. Keyboard suggestions may display sensitive information on the lock screen.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-359
References: https://support.apple.com/en-us/125632
CVE: CVE-2025-43454
Published: 2025-11-04
Description: This issue was addressed through improved state management. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. A device may persistently fail to lock.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633
CVE: CVE-2025-43455
Published: 2025-11-04
Description: A privacy issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. A malicious app may be able to take a screenshot of sensitive information in embedded views.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125638
CVE: CVE-2025-43457
Published: 2025-11-04
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125638
CVE: CVE-2025-43458
Published: 2025-11-04
Description: This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-703
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125633; https://support.apple.com/en-us/125634
CVE: CVE-2025-43459
Published: 2025-11-04
Description: An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple Watch may be able to view Live Voicemail.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/125639
CVE: CVE-2025-43460
Published: 2025-11-04
Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/125632
CVE: CVE-2025-43462
Published: 2025-11-04
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125637
CVE: CVE-2025-43468
Published: 2025-11-04
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-347
References: https://support.apple.com/en-us/125634; https://support.apple.com/en-us/125635; https://support.apple.com/en-us/125636