CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
2 advisories matched
CVE-2025-435205.5/MEDIUMEPSS 94.0%CISA KEV
2025-12-12

Apple iOS, macOS, and iPadOS Kernel Memory Corruption Vulnerability (CVE-2025-43520)

[Affected Scope] Apple operating systems prior to iOS 18.7.2, macOS Sequoia 15.7.2, and other legacy versions

[Impact] A local malicious application can trigger unexpected system termination or write directly to kernel memory, potentially leading to privilege escalation

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.7.2, macOS 15.7.2, etc.)

CVE-2025-312778.8/HIGHEPSS 94.0%CISA KEV
2025-07-30

Apple WebKit Memory Corruption Remote Code Execution Vulnerability (CVE-2025-31277)

[Affected Scope] Apple devices running Safari versions prior to 18.6, iOS/iPadOS prior to 18.6, macOS Sequoia prior to 15.6, tvOS prior to 18.6, visionOS prior to 2.6, and watchOS prior to 11.6

[Impact] Processing maliciously crafted web content may lead to memory corruption, potentially allowing remote attackers to execute arbitrary code (RCE) or cause a denial of service (DoS) on the target device

[Mitigation] Immediately apply the latest official security updates provided by Apple (Safari 18.6, iOS 18.6, macOS 15.6, etc.)