Vulnerabilities (CVE)

Filtered by CWE-284
Total 4157 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-43308 1 Apple 1 Macos 2026-06-17 N/A 5.3 MEDIUM
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data.
CVE-2025-43305 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information.
CVE-2025-43294 1 Apple 1 Macos 2026-06-17 N/A 3.3 LOW
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26, tvOS 26.1, watchOS 26.1. An app may be able to access sensitive user data.
CVE-2025-43291 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system.
CVE-2025-43285 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.
CVE-2025-43270 1 Apple 1 Macos 2026-06-17 N/A 8.8 HIGH
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may gain unauthorized access to Local Network.
CVE-2025-43263 1 Apple 1 Xcode 2026-06-17 N/A 7.1 HIGH
The issue was addressed with improved checks. This issue is fixed in Xcode 26. An app may be able to read and write files outside of its sandbox.
CVE-2025-43241 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to read files outside of its sandbox.
CVE-2025-43233 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
This issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A malicious app acting as a HTTPS proxy could get access to sensitive user data.
CVE-2025-43232 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to bypass certain Privacy preferences.
CVE-2025-43208 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to read sensitive location information.
CVE-2025-43207 1 Apple 1 Macos 2026-06-17 N/A 5.5 MEDIUM
This issue was addressed with improved entitlements. This issue is fixed in macOS Tahoe 26. An app may be able to access user-sensitive data.
CVE-2025-43204 1 Apple 1 Macos 2026-06-17 N/A 7.8 HIGH
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox.
CVE-2025-43198 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to access protected user data.
CVE-2025-43194 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to modify protected parts of the file system.
CVE-2025-43192 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. Account-driven User Enrollment may still be possible with Lockdown Mode turned on.
CVE-2025-43184 1 Apple 1 Macos 2026-06-17 N/A 9.8 CRITICAL
This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A shortcut may be able to bypass sensitive Shortcuts app settings.
CVE-2025-43027 2026-06-17 N/A 9.8 CRITICAL
A critical severity vulnerability has been identified in the ALPR Manager role of Security Center that could allow attackers to gain administrative access to the Genetec Security Center system. The Genetec engineering team discovered this issue internally. There is currently no evidence that this vulnerability has been exploited in the wild.
CVE-2025-41737 1 Metz-connect 6 Ewio2-bm, Ewio2-bm Firmware, Ewio2-m and 3 more 2026-06-17 N/A 7.5 HIGH
Due to webserver misconfiguration an unauthenticated remote attacker is able to read the source of php modules.
CVE-2025-40939 1 Siemens 2 Simatic Cn 4100, Simatic Cn 4100 Firmware 2026-06-17 N/A 4.6 MEDIUM
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port which allows unauthenticated connections. This could allow an attacker with physical access to the device to trigger reboot that could cause denial of service condition.