deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-10483
Published: 2025-09-15
Description: A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/save_user.php. This manipulation of the argument firstname causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. Other parameters might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/qcycop0101-hash/CVE/issues/12; https://vuldb.com/?ctiid.323918; https://vuldb.com/?id.323918
CVE: CVE-2025-10485
Published: 2025-09-15
Description: A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function ppt_log of the file /login of the component HTTP Header Handler. Such manipulation of the argument X-Forwarded-For leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94
References: https://github.com/hhhh333/CVE/blob/main/xss.md; https://vuldb.com/?ctiid.323919; https://vuldb.com/?id.323919
CVE: CVE-2025-24088
Published: 2025-09-15
Description: The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-24133
Published: 2025-09-15
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-24197
Published: 2025-09-15
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-30468
Published: 2025-09-15
Description: This issue was addressed through improved state management. This issue is fixed in iOS 26 and iPadOS 26. Private Browsing tabs may be accessed without authentication.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1390
References: https://support.apple.com/en-us/125108; http://seclists.org/fulldisclosure/2025/Sep/49
CVE: CVE-2025-31254
Published: 2025-09-15
Description: This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125113; http://seclists.org/fulldisclosure/2025/Sep/59
CVE: CVE-2025-31255
Published: 2025-09-15
Description: An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111
CVE: CVE-2025-31268
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-31269
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125112; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-31270
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-31271
Published: 2025-09-15
Description: This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43190
Published: 2025-09-15
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111
CVE: CVE-2025-43203
Published: 2025-09-15
Description: The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26. An attacker with physical access to an unlocked device may be able to view an image in the most recently viewed locked note.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-922
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125109; http://seclists.org/fulldisclosure/2025/Sep/49
CVE: CVE-2025-43204
Published: 2025-09-15
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43207
Published: 2025-09-15
Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43208
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43231
Published: 2025-09-15
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-285
References: https://support.apple.com/en-us/125112; http://seclists.org/fulldisclosure/2025/Sep/55
CVE: CVE-2025-43262
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-358
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43263
Published: 2025-09-15
Description: The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox.
CVSS Score: 7.1 (HIGH)
CWE: CWE-284
References: https://support.apple.com/en-us/125117; http://seclists.org/fulldisclosure/2025/Sep/60
CVE: CVE-2025-43272
Published: 2025-09-15
Description: The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26, visionOS 26, watchOS 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125113
CVE: CVE-2025-43279
Published: 2025-09-15
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-359
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43283
Published: 2025-09-15
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be able to cause unexpected system termination.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43285
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43286
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to break out of its sandbox.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43287
Published: 2025-09-15
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously crafted image may corrupt process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43291
Published: 2025-09-15
Description: A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43292
Published: 2025-09-15
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sequoia 15.7.2, macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-362
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125635
CVE: CVE-2025-43293
Published: 2025-09-15
Description: The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43294
Published: 2025-09-15
Description: An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125632; https://support.apple.com/en-us/125637
CVE: CVE-2025-43295
Published: 2025-09-15
Description: A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://support.apple.com/en-us/125109; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111
CVE: CVE-2025-43297
Published: 2025-09-15
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-843
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43298
Published: 2025-09-15
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-41
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43299
Published: 2025-09-15
Description: A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://support.apple.com/en-us/125109; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111
CVE: CVE-2025-43301
Published: 2025-09-15
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access contact info related to notifications in Notification Center.
CVSS Score: 3.3 (LOW)
CWE: CWE-359
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43302
Published: 2025-09-15
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to cause unexpected system termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125109; https://support.apple.com/en-us/125110
CVE: CVE-2025-43303
Published: 2025-09-15
Description: A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125114
CVE: CVE-2025-43304
Published: 2025-09-15
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to gain root privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43305
Published: 2025-09-15
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43307
Published: 2025-09-15
Description: This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43308
Published: 2025-09-15
Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43310
Published: 2025-09-15
Description: A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to trick a user into copying sensitive data to the pasteboard.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-359
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43311
Published: 2025-09-15
Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43312
Published: 2025-09-15
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to cause unexpected system termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43314
Published: 2025-09-15
Description: A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43315
Published: 2025-09-15
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43316
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26, visionOS 26. A malicious app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125115; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43317
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125114
CVE: CVE-2025-43318
Published: 2025-09-15
Description: This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root privileges may be able to access private information.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43319
Published: 2025-09-15
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43321
Published: 2025-09-15
Description: The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43325
Published: 2025-09-15
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43326
Published: 2025-09-15
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112
CVE: CVE-2025-43327
Published: 2025-09-15
Description: The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125113; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43328
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data.
CVSS Score: 3.3 (LOW)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43329
Published: 2025-09-15
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to break out of its sandbox.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://support.apple.com/en-us/125108; https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125114
CVE: CVE-2025-43330
Published: 2025-09-15
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An app may be able to break out of its sandbox.
CVSS Score: 8.2 (HIGH)
CWE: CWE-693
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43331
Published: 2025-09-15
Description: A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-862
References: https://support.apple.com/en-us/125110; http://seclists.org/fulldisclosure/2025/Sep/53
CVE: CVE-2025-43332
Published: 2025-09-15
Description: A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to break out of its sandbox.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/125110; https://support.apple.com/en-us/125111; https://support.apple.com/en-us/125112