Threat database

CVE-2024-44250 is a high-severity vulnerability in Apple macOS where a permissions issue could allow an app to execute arbitrary code outside its sandbox or with elevated privileges. This issue was addressed by Apple with additional restrictions and fixed in macOS Sequoia 15.1. The vulnerability has a CVSS score of 8.2, indicating a significant impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.

CVE-2024-40858 is a permissions vulnerability in Apple macOS that could allow an app to access the user's Contacts without obtaining explicit user consent. The issue was addressed by Apple with additional restrictions and is fixed in macOS Sequoia 15.1. The vulnerability has a high severity rating with a CVSS score of 7.1, indicating significant confidentiality and integrity impact but no availability impact. There are no known exploits in the wild at this time.

CVE-2025-43264 is a high-severity vulnerability in Apple macOS where processing a maliciously crafted image may corrupt process memory. This memory corruption issue was addressed with improved memory handling and fixed in macOS Sequoia 15.6. The vulnerability has a CVSS score of 8.8, indicating a significant impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

CVE-2024-44286 is a vulnerability in Apple macOS that allows an attacker with physical access to input keyboard events to applications running on a locked device. This issue was addressed through improved state management and fixed in macOS Sequoia 15.1. The vulnerability has a high severity rating with a CVSS score of 7.5. It does not require user interaction or privileges and can be exploited remotely only with physical access. No known exploits are reported in the wild at this time.

CVE-2024-44219 is a permissions vulnerability in Apple macOS that could allow a malicious application with root privileges to access private information. The issue was addressed by Apple with additional restrictions and is fixed in macOS Sequoia 15.1. The vulnerability has a high severity rating with a CVSS score of 7.5. There are no known exploits in the wild at this time.

This issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6. Processing a file may lead to memory corruption.

CVE-2025-43238 is an integer overflow vulnerability in Apple macOS that could allow an application to cause unexpected system termination. The issue has been addressed with improved input validation and fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. The vulnerability has a CVSS score of 6.2, indicating medium severity, and does not impact confidentiality or integrity but affects availability by causing system crashes.

CVE-2025-43219 is a high-severity vulnerability in Apple macOS where processing a maliciously crafted image may corrupt process memory. This memory corruption could lead to significant impacts on confidentiality, integrity, and availability. The issue has been addressed with improved memory handling and is fixed in macOS Sequoia 15.6. There are no known exploits in the wild at this time.

This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items.

An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the user.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. An app may be able to enumerate a user's installed apps.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, visionOS 26.3. An app may be able to access sensitive user data.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or write kernel memory.

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to connect to a network share without user consent.

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. An app may be able to disclose kernel memory.

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to access user-sensitive data.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system.

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.