Skip to content
Appaloosa Scout

macOS

87 CVEs fixed by this release.

Release date
2025-09-15
End of support
CVEs fixed
87
CISA KEV
0
Critical
6
High
23
NVD pending
0

CVEs fixed

CVE Severity
CVE-2025-43359

A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and…

CRITICAL 9.8
CVE-2025-43342

A correctness issue was addressed with improved checks. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, iOS…

CRITICAL 9.8
CVE-2025-43343

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

CRITICAL 9.8
CVE-2025-43347

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, …

CRITICAL 9.8
CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS…

CRITICAL 9.8
CVE-2024-27280

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through …

CRITICAL 9.8
CVE-2025-43419

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

HIGH 8.8
CVE-2025-43358

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 18.7 and iPadOS 18.7…

HIGH 8.8
CVE-2025-43329

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Taho…

HIGH 8.8
CVE-2025-43330

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An…

HIGH 8.2
CVE-2025-43323

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 2…

HIGH 8.1
CVE-2025-43320

The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.7.3, macOS Tahoe 26. An app…

HIGH 7.8
CVE-2025-43361

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26, macOS S…

HIGH 7.8
CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.…

HIGH 7.8
CVE-2025-43333

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be ab…

HIGH 7.8
CVE-2025-43340

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be ab…

HIGH 7.8
CVE-2025-43341

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 2…

HIGH 7.8
CVE-2025-43316

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26, visionOS 26. A m…

HIGH 7.8
CVE-2025-43286

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma…

HIGH 7.8
CVE-2025-43298

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …

HIGH 7.8
CVE-2025-43204

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to …

HIGH 7.8
CVE-2025-31259

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sequoia 15.7, macO…

HIGH 7.8
CVE-2025-6965

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the numb…

HIGH 7.7
CVE-2025-43376

A logic issue was addressed with improved state management. This issue is fixed in Safari 26, iOS 18.7.7 and iPadOS 18.…

HIGH 7.5
CVE-2025-31271

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime ca…

HIGH 7.5
CVE-2025-24088

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to overri…

HIGH 7.5
CVE-2025-43338

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26,…

HIGH 7.1
CVE-2025-43287

The issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. Processing a maliciously …

HIGH 7.1
CVE-2025-43304

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14…

HIGH 7.0
CVE-2025-43356

The issue was addressed with improved handling of caches. This issue is fixed in Safari 26, iOS 18.7 and iPadOS 18.7, i…

MEDIUM 6.5
CVE-2025-43327

The issue was addressed by adding additional logic. This issue is fixed in Safari 26, macOS Tahoe 26. Visiting a malici…

MEDIUM 6.5
CVE-2025-43272

The issue was addressed with improved memory handling. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Ta…

MEDIUM 6.5
CVE-2025-43318

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root pr…

MEDIUM 6.2
CVE-2025-43297

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may b…

MEDIUM 6.2
CVE-2025-43279

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Tahoe …

MEDIUM 6.2
CVE-2025-40909

[Apple Perl] Multiple issues in Perl

MEDIUM 5.9
CVE-2025-46306

The issue was addressed with improved bounds checks. This issue is fixed in Keynote 15.1, iOS 26 and iPadOS 26, macOS T…

MEDIUM 5.5
CVE-2025-43345

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPa…

MEDIUM 5.5
CVE-2025-43288

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 2…

MEDIUM 5.5
CVE-2025-43296

A logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An app may bypass Gatekeep…

MEDIUM 5.5
CVE-2025-43366

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be…

MEDIUM 5.5
CVE-2025-43367

A privacy issue was addressed by moving sensitive data. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An ap…

MEDIUM 5.5
CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able …

MEDIUM 5.5
CVE-2025-43353

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macO…

MEDIUM 5.5
CVE-2025-43354

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26…

MEDIUM 5.5
CVE-2025-43355

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.7 and iPadOS 18.7, iO…

MEDIUM 5.5
CVE-2025-43337

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS …

MEDIUM 5.5
CVE-2025-43346

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 1…

MEDIUM 5.5
CVE-2025-43321

The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia…

MEDIUM 5.5
CVE-2025-43325

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Tahoe 26. An app may b…

MEDIUM 5.5
CVE-2025-43326

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Son…

MEDIUM 5.5
CVE-2025-43312

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma …

MEDIUM 5.5
CVE-2025-43314

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …

MEDIUM 5.5
CVE-2025-43315

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8,…

MEDIUM 5.5
CVE-2025-43317

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Taho…

MEDIUM 5.5
CVE-2025-43319

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8,…

MEDIUM 5.5
CVE-2025-43299

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macO…

MEDIUM 5.5
CVE-2025-43302

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18…

MEDIUM 5.5
CVE-2025-43303

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26…

MEDIUM 5.5
CVE-2025-43305

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS T…

MEDIUM 5.5
CVE-2025-43291

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Son…

MEDIUM 5.5
CVE-2025-43292

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7, macOS Sequoia 1…

MEDIUM 5.5
CVE-2025-43293

The issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, m…

MEDIUM 5.5
CVE-2025-43295

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7 and iPadOS 18.7, macO…

MEDIUM 5.5
CVE-2025-43285

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma…

MEDIUM 5.5
CVE-2025-31269

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 2…

MEDIUM 5.5
CVE-2025-31270

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be ab…

MEDIUM 5.5
CVE-2025-43190

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …

MEDIUM 5.5
CVE-2025-43207

This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to acces…

MEDIUM 5.5
CVE-2025-43208

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be ab…

MEDIUM 5.5
CVE-2025-24197

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS T…

MEDIUM 5.5
CVE-2025-31268

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma…

MEDIUM 5.5
CVE-2025-43308

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14…

MEDIUM 5.3
CVE-2025-43332

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma …

MEDIUM 5.2
CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14…

MEDIUM 5.1
CVE-2025-43262

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted M…

MEDIUM 5.1
CVE-2025-43310

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sono…

MEDIUM 4.4
CVE-2025-43368

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPad…

MEDIUM 4.3
CVE-2025-43331

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An ap…

MEDIUM 4.0
CVE-2025-43307

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. A…

MEDIUM 4.0
CVE-2025-43357

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7 and iPadOS 1…

LOW 3.3
CVE-2025-43344

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26 and iPadOS 26,…

LOW 3.3
CVE-2025-43328

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be ab…

LOW 3.3
CVE-2025-43301

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…

LOW 3.3
CVE-2025-43294

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issu…

LOW 3.3
CVE-2025-43283

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Tahoe 26. An app may be…

LOW 3.3
CVE-2025-43349

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7 and iPadOS 1…

LOW 2.8