Threat database

2,266 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.7%	CVE-2025-43428iOS and iPadOS · Photos in the Hidden Photos Album may be viewed without authentication Critical9.8EPSS 0.7%2025-12-17CVE Database V5CVE-2025-43428 A configuration issue was addressed with additional restrictions. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Photos in the Hidden Photos Album may be viewed without authentication. EPSS 0.7%Vulnerability Apple	CVE Database V5	2025-12-17
Medium	5.5	EPSS 0.2%	CVE-2025-46283macOS · An app may be able to access sensitive user data Medium5.5EPSS 0.2%2025-12-17CVE Database V5CVE-2025-46283 A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2. An app may be able to access sensitive user data. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-17
Medium	4.3	EPSS 34%	CVE-2025-43541Safari · Processing maliciously crafted web content may lead to an unexpected Safari crash Medium4.3EPSS 34%2025-12-17CVE Database V5CVE-2025-43541 A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. EPSS 34%Vulnerability Apple	CVE Database V5	2025-12-17
Medium	4.3	EPSS 0.8%	CVE-2025-43501Safari · Processing maliciously crafted web content may lead to an unexpected process crash Medium4.3EPSS 0.8%2025-12-17CVE Database V5CVE-2025-43501 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, visionOS 26.2. Processing maliciously crafted web content may lead to an unexpected process crash. EPSS 0.8%Vulnerability Apple	CVE Database V5	2025-12-17
Medium	5.5	EPSS 0.2%	CVE-2025-46282Safari · An app may be able to access sensitive user data Medium5.5EPSS 0.2%2025-12-17CVE Database V5CVE-2025-46282 The issue was addressed with additional permissions checks. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. An app may be able to access sensitive user data. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-17
Medium	5.5	EPSS 0.2%	CVE-2025-46277iOS and iPadOS · An app may be able to access a user’s Safari history Medium5.5EPSS 0.2%2025-12-17CVE Database V5CVE-2025-46277 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, watchOS 26.2. An app may be able to access a user’s Safari history. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-17
Low	3.3	EPSS 0.2%	CVE-2025-43518iOS and iPadOS · An app may be able to inappropriately access files through the spellcheck API Low3.3EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43518 A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
Low	3.3	EPSS 0.1%	CVE-2025-43522macOS · An app may be able to access user-sensitive data Low3.3EPSS 0.1%2025-12-12CVE Database V5CVE-2025-43522 A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access user-sensitive data. EPSS 0.1%Vulnerability Apple	CVE Database V5	2025-12-12
High	7.8	EPSS 0.2%	CVE-2025-43467macOS · An app may be able to gain root privileges High7.8EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43467 This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to gain root privileges. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
Medium	5.5	EPSS 0.2%	CVE-2025-43471macOS · An app may be able to access sensitive user data Medium5.5EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43471 The issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
Medium	5.5	EPSS 0.2%	CVE-2025-43406macOS · An app may be able to access sensitive user data Medium5.5EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43406 A logic issue was addressed with improved restrictions. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
Low	2.4	EPSS 0.2%	CVE-2025-43410macOS · An attacker with physical access may be able to view deleted notes Low2.4EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43410 The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.2. An attacker with physical access may be able to view deleted notes. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
Low	3.3	EPSS 3.0%	CVE-2025-43538iOS and iPadOS · An app may be able to access sensitive user data Low3.3EPSS 3.0%2025-12-12CVE Database V5CVE-2025-43538 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An app may be able to access sensitive user data. EPSS 3.0%Vulnerability Apple	CVE Database V5	2025-12-12
High	8.8	EPSS 6.2%	CVE-2025-43539iOS and iPadOS · Processing a file may lead to memory corruption High8.8EPSS 6.2%2025-12-12CVE Database V5CVE-2025-43539 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. Processing a file may lead to memory corruption. EPSS 6.2%Vulnerability Apple	CVE Database V5	2025-12-12
High	7.5	EPSS 0.9%	CVE-2025-43542iOS and iPadOS · Password fields may be unintentionally revealed when remotely controlling a device over FaceTime in… High7.5EPSS 0.9%2025-12-12CVE Database V5CVE-2025-43542 This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Tahoe 26.2, visionOS 26.2. Password fields may be unintentionally revealed when remotely controlling a device over FaceTime. EPSS 0.9%Vulnerability Apple	CVE Database V5	2025-12-12
Medium	5.5	EPSS 0.1%	CVE-2025-43470macOS · A standard user may be able to view files made from a disk image belonging to an administrator in… Medium5.5EPSS 0.1%2025-12-12CVE Database V5CVE-2025-43470 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.1. A standard user may be able to view files made from a disk image belonging to an administrator. EPSS 0.1%Vulnerability Apple	CVE Database V5	2025-12-12
Medium	5.5	EPSS 0.2%	CVE-2025-43523macOS · An app may be able to access sensitive user data Medium5.5EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43523 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26.2. An app may be able to access sensitive user data. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
Medium	5.5	EPSS 0.2%	CVE-2025-43466macOS · An app may be able to access sensitive user data Medium5.5EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43466 An injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12
High	7.5	EPSS 0.3%	CVE-2025-43519macOS · An app may be able to access sensitive user data High7.5EPSS 0.3%2025-12-12CVE Database V5CVE-2025-43519 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access sensitive user data. EPSS 0.3%Vulnerability Apple	CVE Database V5	2025-12-12
High	7.8	EPSS 0.2%	CVE-2025-43512iOS and iPadOS · An app may be able to elevate privileges High7.8EPSS 0.2%2025-12-12CVE Database V5CVE-2025-43512 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to elevate privileges. EPSS 0.2%Vulnerability Apple	CVE Database V5	2025-12-12

Showing 901–920 of 2,266 results