iOS

iOS 18.7.3

iOS 18.7.3, publié le 2025-12-12, corrige 23 CVE, dont 2 activement exploitées (CISA KEV). Les versions antérieures restent exposées à ces vulnérabilités.

Date de sortie: 2025-12-12
Fin de support: 2026-04-22 · EOL
CVE corrigées: 23
KEV CISA: 2

CVE corrigées

CVE	Sévérité	KEV	Publié
CVE-2025-43529 HIGH 8.8 KEV 2025-12-17 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…	HIGH 8.8	KEV	2025-12-17
CVE-2025-14174 HIGH 8.8 KEV 2025-12-12 Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a cra…	HIGH 8.8	KEV	2025-12-12
CVE-2025-43539 HIGH 8.8 2025-12-12 The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS…	HIGH 8.8	—	2025-12-12
CVE-2025-46285 HIGH 7.8 2025-12-12 An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 1…	HIGH 7.8	—	2025-12-12
CVE-2025-43512 HIGH 7.8 2025-12-12 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 2…	HIGH 7.8	—	2025-12-12
CVE-2025-46311 HIGH 7.5 2026-05-12 An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…	HIGH 7.5	—	2026-05-12
CVE-2025-46290 HIGH 7.5 2026-02-11 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS So…	HIGH 7.5	—	2026-02-11
CVE-2025-43542 HIGH 7.5 2025-12-12 This issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, m…	HIGH 7.5	—	2025-12-12
CVE-2025-9086 HIGH 7.5 2025-09-12 1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak with `http://target` (same hostname, …	HIGH 7.5	—	2025-09-12
CVE-2025-46287 MEDIUM 6.5 2025-12-12 An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…	MEDIUM 6.5	—	2025-12-12
CVE-2024-7264 MEDIUM 6.5 2025-12-12 [Apple curl] Multiple issues in curl	MEDIUM 6.5	—	2025-12-12
CVE-2025-46292 MEDIUM 5.5 2025-12-17 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able …	MEDIUM 5.5	—	2025-12-17
CVE-2025-43530 MEDIUM 5.5 2025-12-12 This issue was addressed with improved checks. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2…	MEDIUM 5.5	—	2025-12-12
CVE-2025-43538 MEDIUM 5.5 2025-12-12 A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sonoma 14.8.3,…	MEDIUM 5.5	—	2025-12-12
CVE-2025-46276 MEDIUM 5.5 2025-12-12 An information disclosure issue was addressed with improved privacy controls. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, ma…	MEDIUM 5.5	—	2025-12-12
CVE-2025-43535 MEDIUM 4.3 2025-12-17 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe …	MEDIUM 4.3	—	2025-12-17
CVE-2025-43536 MEDIUM 4.3 2025-12-17 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.…	MEDIUM 4.3	—	2025-12-17
CVE-2025-43541 MEDIUM 4.3 2025-12-17 A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, …	MEDIUM 4.3	—	2025-12-17
CVE-2025-43501 MEDIUM 4.3 2025-12-17 A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2…	MEDIUM 4.3	—	2025-12-17
CVE-2025-5918 LOW 3.9 2025-06-09 A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for rea…	LOW 3.9	—	2025-06-09
CVE-2025-46279 LOW 3.3 2025-12-17 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2…	LOW 3.3	—	2025-12-17
CVE-2025-43531 LOW 3.1 2025-12-17 A race condition was addressed with improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS …	LOW 3.1	—	2025-12-17
CVE-2025-43532 LOW 2.8 2025-12-12 A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Seq…	LOW 2.8	—	2025-12-12

Piloter cette mise à jour iOS sur votre flotte

Appaloosa orchestre les mises à jour iOS et l'inventaire des apps de votre parc.

En savoir plus sur cette version, sur le blog Appaloosa

Gérer iOS avec Appaloosa