9.8
CVE-2025-24265 - Out‑of‑Bounds Read Leading to Unintended System Termination in macOS
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.
9.8
CVE-2025-24273 - macOS Kernel Out-of-Bounds Write Causing Memory Corruption and System Crash
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.
5.5
CVE-2025-24199 - Uncontrolled Format String Leading to DoS in macOS
An uncontrolled format string issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause a denial-of-service.
6.1
CVE-2025-24208 - webkitgtk: Loading a malicious iframe may lead to a cross-site scripting attack
A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4. Loading a malicious iframe may lead to a cross-site scripting attack.
9.8
CVE-2025-30461 - macOS System Pasteboard Access Issue Enabling Unauthorized Data Read
An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
9.8
CVE-2025-24249 -
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to check the existence of an arbitrary path on the file system.
5.5
CVE-2025-30441 - Arbitrary File Overwrite Vulnerability in Xcode via Improper State Management
This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files.
9.8
CVE-2025-24269 - Improper Memory Handling Causing Unexpected System Termination in macOS
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination.
7.8
CVE-2025-24228 - macOS Kernel Buffer Overflow Enables Privilege Escalation
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to execute arbitrary code with kernel privileges.
9.8
CVE-2025-30457 - Symlink Validation Exploit Allows Unauthorized Disk Access in macOS
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to create symlinks to protected regions of the disk.