Where
-Infinity
0

Trending

Last week
Last month
Last year

Apple macOS SequoiaRace Condition

Risk 87
Severity
10
Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.

1 / 27
Source: MITRE
First published (updated )
CVE-2024-44146

Apple Multiple ProductsApple Multiple Products Use-After-Free Vulnerability

Risk 90
Severity
10
Exploited
Zeroday
EPSS
0.21%
Input Validation, Use After Free, Null Pointer Dereference, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

1 / 40
Source: MITRE
First published (updated )
CVE-2025-24085

Apple visionOSApple Multiple Products WebKit Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
Zeroday
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Accessibility. An authorization issue was addressed with improved state management.

1 / 67
Source: Apple
First published (updated )
CVE-2025-24201

Apple macOS SequoiaApple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Risk 100
Severity
10
Exploited
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

1 / 3
Source: MITRE
First published (updated )
CVE-2025-43300

rubygems/stringioBuffer Overflow, Input Validation, Race Condition

Risk 89
Severity
9.8
Buffer Overflow, Input Validation, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.

1 / 64
Source: NVD
First published (updated )
CVE-2024-27280

debian/apache2Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

Risk 93
Severity
9.8
SSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Apache. This is a vulnerability in open source code and Apple Software among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

1 / 6
Source: Apple
First published (updated )
CVE-2024-38476

Libexpat Project LibexpatInput Validation, Race Condition, Use After Free, XEE, Integer Overflow

Risk 93
Severity
9.8
Input Validation, Race Condition, Use After Free, XEE, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 39
Source: Apple
First published (updated )
CVE-2024-45490

Apple macOSUse After Free, Race Condition, Input Validation

Risk 86
Severity
9.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.

1 / 33
Source: MITRE
First published (updated )
CVE-2024-54465

Apple macOSUse After Free, Input Validation

Risk 88
Severity
9.8
Use After Free, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 27
Source: Apple
First published (updated )
CVE-2024-54506

Apple visionOSUse After Free, Race Condition, Input Validation

Risk 86
Severity
9.8
Use After Free, Race Condition, Input Validation
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Accounts. A logic issue was addressed with improved file handling.

1 / 48
Source: Apple
First published (updated )
CVE-2024-54492

Apple visionOSUse After Free, Race Condition, Input Validation, Buffer Overflow, Null Pointer Dereference, Integer Overflow

Risk 91
Severity
9.8
Use After Free, Race Condition, Input Validation, Buffer Overflow, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accounts. A logic issue was addressed with improved file handling.

1 / 111
Source: Apple
First published (updated )
CVE-2024-54534

apple macOS VenturaInput Validation, Race Condition, Use After Free, Null Pointer Dereference

Risk 61
Severity
9.8
EPSS
0.04%
Input Validation, Race Condition, Use After Free, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AirPlay. A null pointer dereference was addressed with improved input validation.

1 / 50
Source: Apple
First published (updated )
CVE-2025-24103

apple macOS VenturaRace Condition, Input Validation, Integer Overflow, Buffer Overflow, Use After Free, Null Pointer Dereference

Risk 61
Severity
9.8
EPSS
0.04%
Race Condition, Input Validation, Integer Overflow, Buffer Overflow, Use After Free, Null Pointer Dereference
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access removable volumes without user consent.

1 / 123
Source: NVD
First published (updated )
CVE-2025-24093

apple iPadOSInfoleak, Input Validation, Null Pointer Dereference, Use After Free

Risk 61
Severity
9.8
EPSS
0.04%
Infoleak, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AirPlay. A null pointer dereference was addressed with improved input validation.

1 / 21
Source: Apple
First published (updated )
CVE-2025-24102

apple macOS VenturaInfoleak, Input Validation, Null Pointer Dereference

Risk 61
Severity
9.8
EPSS
0.04%
Infoleak, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data.

1 / 9
Source: MITRE
First published (updated )
CVE-2025-24109

apple iPadOSUse After Free, Input Validation, Null Pointer Dereference

Risk 61
Severity
9.8
EPSS
0.04%
Use After Free, Input Validation, Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

AirPlay. A null pointer dereference was addressed with improved input validation.

1 / 29
Source: Apple
First published (updated )
CVE-2025-24118

apple macOS VenturaInput Validation, Null Pointer Dereference, Use After Free, Race Condition

Risk 61
Severity
9.8
EPSS
0.04%
Input Validation, Null Pointer Dereference, Use After Free, Race Condition
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AirPlay. A null pointer dereference was addressed with improved input validation.

1 / 41
Source: Apple
First published (updated )
CVE-2025-24130

Apple WatchOSInput Validation, Null Pointer Dereference, Use After Free

Risk 61
Severity
9.8
EPSS
0.04%
Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Accessibility. An authentication issue was addressed with improved state management.

1 / 13
Source: Apple
First published (updated )
CVE-2025-24126

apple macOS VenturaInfoleak, Race Condition, Input Validation, Null Pointer Dereference, Use After Free

Risk 61
Severity
9.8
EPSS
0.04%
Infoleak, Race Condition, Input Validation, Null Pointer Dereference, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AirPlay. A null pointer dereference was addressed with improved input validation.

1 / 44
Source: Apple
First published (updated )
CVE-2025-24146

Gnome libxml2Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow

Risk 93
Severity
9.8
Use After Free, Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Accessibility. A logging issue was addressed with improved data redaction.

1 / 86
Source: Apple
First published (updated )
CVE-2024-56171

Apple macOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

Risk 86
Severity
9.8
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.

1 / 110
Source: MITRE
First published (updated )
CVE-2025-24181

Apple macOSInfoleak, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow

Risk 86
Severity
9.8
Infoleak, Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 113
Source: Apple
First published (updated )
CVE-2025-24250

Apple iPadOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 61
Severity
9.8
EPSS
0.04%
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.

1 / 193
Source: MITRE
First published (updated )
CVE-2025-30465

Apple iPadOSBuffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free

Risk 61
Severity
9.8
EPSS
0.05%
Buffer Overflow, Input Validation, Null Pointer Dereference, Integer Overflow, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 126
Source: Apple
First published (updated )
CVE-2025-30433

Apple macOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 86
Severity
9.8
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent.

1 / 140
Source: MITRE
First published (updated )
CVE-2025-24207

Apple macOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 86
Severity
9.8
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 132
Source: Apple
First published (updated )
CVE-2025-24260

apple macOS SequoiaInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 86
Severity
9.8
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to trick a user into copying sensitive data to the pasteboard.

1 / 158
Source: MITRE
First published (updated )
CVE-2025-24241

apple macOS SequoiaInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 86
Severity
9.8
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker may be able to cause unexpected app termination.

1 / 157
Source: MITRE
First published (updated )
CVE-2025-24247

apple macOS SequoiaBuffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition

Risk 86
Severity
9.8
Buffer Overflow, Input Validation, Null Pointer Dereference, Use After Free, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.

1 / 159
Source: MITRE
First published (updated )
CVE-2025-24266

Apple macOSInput Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition

Risk 61
Severity
9.8
EPSS
0.04%
Input Validation, Null Pointer Dereference, Use After Free, Buffer Overflow, Integer Overflow, Race Condition
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Accessibility. A logging issue was addressed with improved data redaction.

1 / 147
Source: Apple
First published (updated )
CVE-2025-30457

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203