This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Apple fixes 110 vulnerabilities

Apple fixes 110 vulnerabilities in its products. Selected ones can be found below; the remaining ones are described on the vendor's pages [1] and in a clear table at [2]. Products and their fixed versions: iOS - 26.1 [3], 18.7.2 [4] iPadOS - 26.1 [3], 18.7.2 [4] macOS - Tahoe 26.1 [5], Sequoia 15.7.2 [6], Sonoma 14.8.2 [7] tvOS - 26.1 [8] watchOS - 26.1 [9] visionOS - 26.1 [10] Safari - 26.1 [11] Xcode - 26.1 [12]

Apple iOS, iPadOS, macOS Tahoe, watchOS, tvOS, visionOS, Safari - memory corruption (CVE-2025-43431)
CVSS 8.8 (High)

Due to faulty memory management in the WebKit component in iOS, iPadOS, macOS Tahoe, watchOS, tvOS and visionOS and in Safari, an unauthenticated remote attacker can corrupt memory while malicious web content is being processed [13].

The vulnerability is present in products:

  • iOS; <26.1
  • iPadOS; <26.1
  • macOS; <26.1
  • watchOS; <26.1
  • tvOS; <26.1
  • visionOS; <26.1
  • Safari; <26.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

  • CVE-2025-43431 at cve.org, NVD
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer at cwe.mitre.org

The vulnerability was publicly disclosed 3. 11. 2025.

Apple iOS, iPadOS, watchOS, tvOS, visionOS - kernel memory corruption (CVE-2025-43462)
CVSS 7.5 (High)

Due to improper memory handling in iOS, iPadOS, watchOS, tvOS and visionOS, an unauthenticated remote attacker can cause the system to terminate unexpectedly or corrupt kernel memory [14].

The vulnerability is present in products:

  • iOS; <26.1
  • iPadOS; <26.1
  • watchOS; <26.1
  • tvOS; <26.1
  • visionOS; <26.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

The vulnerability was publicly disclosed 3. 11. 2025.

Apple iOS, iPadOS, macOS Sonoma, watchOS, tvOS, visionOS - (CVE-2025-43372)
CVSS 7.8 (High)

Due to improper input validation in iOS, iPadOS, macOS Sonoma, watchOS, tvOS and visionOS, an unauthenticated local attacker can, by means of social engineering, corrupt memory while a maliciously crafted media file is being processed [15].

The vulnerability is present in products:

  • iOS; <26.1
  • iPadOS; <26.1
  • macOS; <14.8.2
  • watchOS; <26.1
  • tvOS; <26.1
  • visionOS; <26.1

CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

Apple iOS, iPadOS, macOS Tahoe, macOS Sonoma, macOS Sequoia, tvOS, visionOS - sandbox escape (CVE-2025-43407)
CVSS 7.8 (High)

Due to insufficient access control in iOS, iPadOS, macOS Tahoe, macOS Sonoma, macOS Sequoia, tvOS and visionOS, an unauthenticated local attacker can bypass the sandbox and escape from its isolation [16].

The vulnerability is present in products:

  • iOS; <26.1
  • iPadOS; <26.1
  • macOS; <26.1; >=15.0, <15.7.2; >=14.0, <14.8.2
  • tvOS; <26.1
  • visionOS; <26.1

CVSS: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 3. 11. 2025.

Apple macOS Tahoe, macOS Sonoma, macOS Sequoia - privilege escalation (CVE-2025-43472)
CVSS 7.8 (High)

Due to insufficient input validation in macOS Sonoma and macOS Sequoia, an authenticated local attacker can gain root privileges by means of a malicious application [17].

The vulnerability is present in product:

  • macOS; <26.1; >=15.0, <15.7.2; >=14.0, <14.8.2

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 3. 11. 2025.

By CESNET, z.s.p.o. Michaela Jarošová on 11. 11. 2025.

CESNET, z.s.p.o. Logo