{
  "fix": "Sequoia 15.6",
  "url": "https://patchblox.com/security/fix/macos/sequoia-15.6",
  "summary": "Sequoia 15.6, released July 29, 2025, fixes 85 CVEs in Sequoia. One of them is being exploited (CVE-2025-6558); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "macos",
  "type": "os-version",
  "title": "Sequoia 15.6",
  "released": "2025-07-29T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-6558, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 85,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.73452,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/124149",
  "appliesTo": [
    {
      "product": "Sequoia",
      "productUrl": "https://patchblox.com/security/product/macos/sequoia",
      "fixedVersion": "15.6",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-6558",
      "url": "https://patchblox.com/security/cve/CVE-2025-6558",
      "title": "Chromium: CVE-2025-6558 Incorrect validation of untrusted input in ANGLE and GPU",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "Patch now",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.10927,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31281",
      "url": "https://patchblox.com/security/cve/CVE-2025-31281",
      "title": "Model I/O: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.1,
      "epss": 0.01284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43186",
      "url": "https://patchblox.com/security/cve/CVE-2025-43186",
      "title": "afclip: Parsing a file may lead to an unexpected app termination",
      "component": "afclip",
      "impact": "Parsing a file may lead to an unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43234",
      "url": "https://patchblox.com/security/cve/CVE-2025-43234",
      "title": "Metal: Processing a maliciously crafted texture may lead to unexpected app termination",
      "component": "Metal",
      "impact": "Processing a maliciously crafted texture may lead to unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31279",
      "url": "https://patchblox.com/security/cve/CVE-2025-31279",
      "title": "Find My: An app may be able to fingerprint the user",
      "component": "Find My",
      "impact": "An app may be able to fingerprint the user",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43209",
      "url": "https://patchblox.com/security/cve/CVE-2025-43209",
      "title": "ICU: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "ICU",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43220",
      "url": "https://patchblox.com/security/cve/CVE-2025-43220",
      "title": "copyfile: An app may be able to access protected user data",
      "component": "copyfile",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00886,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43261",
      "url": "https://patchblox.com/security/cve/CVE-2025-43261",
      "title": "File Bookmark: An app may be able to break out of its sandbox",
      "component": "File Bookmark",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00829,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43222",
      "url": "https://patchblox.com/security/cve/CVE-2025-43222",
      "title": "CFNetwork: An attacker may be able to cause unexpected app termination",
      "component": "CFNetwork",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00799,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43193",
      "url": "https://patchblox.com/security/cve/CVE-2025-43193",
      "title": "SecurityAgent: An app may be able to cause a denial-of-service",
      "component": "SecurityAgent",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00795,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43189",
      "url": "https://patchblox.com/security/cve/CVE-2025-43189",
      "title": "WebContentFilter: A malicious app may be able to read kernel memory",
      "component": "WebContentFilter",
      "impact": "A malicious app may be able to read kernel memory",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00794,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43194",
      "url": "https://patchblox.com/security/cve/CVE-2025-43194",
      "title": "PackageKit: An app may be able to modify protected parts of the file system",
      "component": "PackageKit",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43199",
      "url": "https://patchblox.com/security/cve/CVE-2025-43199",
      "title": "Core Services: A malicious app may be able to gain root privileges",
      "component": "Core Services",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43253",
      "url": "https://patchblox.com/security/cve/CVE-2025-43253",
      "title": "AppleMobileFileIntegrity: A malicious app may be able to launch arbitrary binaries on a trusted device",
      "component": "AppleMobileFileIntegrity",
      "impact": "A malicious app may be able to launch arbitrary binaries on a trusted device",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00779,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43232",
      "url": "https://patchblox.com/security/cve/CVE-2025-43232",
      "title": "PackageKit: An app may be able to bypass certain Privacy preferences",
      "component": "PackageKit",
      "impact": "An app may be able to bypass certain Privacy preferences",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43233",
      "url": "https://patchblox.com/security/cve/CVE-2025-43233",
      "title": "Security: A malicious app acting as a HTTPS proxy could get access to sensitive user data",
      "component": "Security",
      "impact": "A malicious app acting as a HTTPS proxy could get access to sensitive user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00767,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43243",
      "url": "https://patchblox.com/security/cve/CVE-2025-43243",
      "title": "Software Update: An app may be able to modify protected parts of the file system",
      "component": "Software Update",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00767,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43245",
      "url": "https://patchblox.com/security/cve/CVE-2025-43245",
      "title": "AppleMobileFileIntegrity: An app may be able to access protected user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43192",
      "url": "https://patchblox.com/security/cve/CVE-2025-43192",
      "title": "Managed Configuration: Account-driven User Enrollment may still be possible with Lockdown Mode turned on",
      "component": "Managed Configuration",
      "impact": "Account-driven User Enrollment may still be possible with Lockdown Mode turned on",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00684,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43273",
      "url": "https://patchblox.com/security/cve/CVE-2025-43273",
      "title": "CoreMedia: A sandboxed process may be able to circumvent sandbox restrictions",
      "component": "CoreMedia",
      "impact": "A sandboxed process may be able to circumvent sandbox restrictions",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.1,
      "epss": 0.00669,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43198",
      "url": "https://patchblox.com/security/cve/CVE-2025-43198",
      "title": "Dock: An app may be able to access protected user data",
      "component": "Dock",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00661,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43275",
      "url": "https://patchblox.com/security/cve/CVE-2025-43275",
      "title": "NetAuth: An app may be able to break out of its sandbox",
      "component": "NetAuth",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43244",
      "url": "https://patchblox.com/security/cve/CVE-2025-43244",
      "title": "AMD: An app may be able to cause unexpected system termination",
      "component": "AMD",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00602,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43237",
      "url": "https://patchblox.com/security/cve/CVE-2025-43237",
      "title": "WebContentFilter: An app may be able to cause unexpected system termination",
      "component": "WebContentFilter",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00559,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6965",
      "url": "https://patchblox.com/security/cve/CVE-2025-6965",
      "title": "SQLite: Processing a file may lead to memory corruption",
      "component": "SQLite",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.7,
      "epss": 0.73452,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-7424",
      "url": "https://patchblox.com/security/cve/CVE-2025-7424",
      "title": "Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes",
      "component": "libxslt",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.01301,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43227",
      "url": "https://patchblox.com/security/cve/CVE-2025-43227",
      "title": "WebKit: Processing maliciously crafted web content may disclose sensitive user information",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may disclose sensitive user information",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.01252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31278",
      "url": "https://patchblox.com/security/cve/CVE-2025-31278",
      "title": "WebKit: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.01244,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43216",
      "url": "https://patchblox.com/security/cve/CVE-2025-43216",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.01108,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43214",
      "url": "https://patchblox.com/security/cve/CVE-2025-43214",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.01094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43223",
      "url": "https://patchblox.com/security/cve/CVE-2025-43223",
      "title": "CFNetwork: A non-privileged user may be able to modify restricted network settings",
      "component": "CFNetwork",
      "impact": "A non-privileged user may be able to modify restricted network settings",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.01024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43240",
      "url": "https://patchblox.com/security/cve/CVE-2025-43240",
      "title": "WebKit: A download\u0027s origin may be incorrectly associated",
      "component": "WebKit",
      "impact": "A download\u0027s origin may be incorrectly associated",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.01005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-7425",
      "url": "https://patchblox.com/security/cve/CVE-2025-7425",
      "title": "Libxslt: heap use-after-free in libxslt caused by atype corruption in xmlattrptr",
      "component": "libxml2",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00444,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43202",
      "url": "https://patchblox.com/security/cve/CVE-2025-43202",
      "title": "libnetcore: Processing a file may lead to memory corruption",
      "component": "libnetcore",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00431,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43211",
      "url": "https://patchblox.com/security/cve/CVE-2025-43211",
      "title": "WebKit: Processing web content may lead to a denial-of-service",
      "component": "WebKit",
      "impact": "Processing web content may lead to a denial-of-service",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00416,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43264",
      "url": "https://patchblox.com/security/cve/CVE-2025-43264",
      "title": "Model I/O: Processing a maliciously crafted image may corrupt process memory",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43265",
      "url": "https://patchblox.com/security/cve/CVE-2025-43265",
      "title": "WebKit: Processing maliciously crafted web content may disclose internal states of the app",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may disclose internal states of the app",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31280",
      "url": "https://patchblox.com/security/cve/CVE-2025-31280",
      "title": "Model I/O: Processing a maliciously crafted file may lead to heap corruption",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted file may lead to heap corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43277",
      "url": "https://patchblox.com/security/cve/CVE-2025-43277",
      "title": "CoreAudio: Processing a maliciously crafted audio file may lead to memory corruption",
      "component": "CoreAudio",
      "impact": "Processing a maliciously crafted audio file may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43224",
      "url": "https://patchblox.com/security/cve/CVE-2025-43224",
      "title": "Model I/O: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43196",
      "url": "https://patchblox.com/security/cve/CVE-2025-43196",
      "title": "libxpc: An app may be able to gain root privileges",
      "component": "libxpc",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43239",
      "url": "https://patchblox.com/security/cve/CVE-2025-43239",
      "title": "sips: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "sips",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43187",
      "url": "https://patchblox.com/security/cve/CVE-2025-43187",
      "title": "Disk Images: Running an hdiutil command may unexpectedly execute arbitrary code",
      "component": "Disk Images",
      "impact": "Running an hdiutil command may unexpectedly execute arbitrary code",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43188",
      "url": "https://patchblox.com/security/cve/CVE-2025-43188",
      "title": "DiskArbitration: A malicious app may be able to gain root privileges",
      "component": "DiskArbitration",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43248",
      "url": "https://patchblox.com/security/cve/CVE-2025-43248",
      "title": "AppleMobileFileIntegrity: A malicious app may be able to gain root privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43249",
      "url": "https://patchblox.com/security/cve/CVE-2025-43249",
      "title": "AppleMobileFileIntegrity: An app may be able to gain root privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43270",
      "url": "https://patchblox.com/security/cve/CVE-2025-43270",
      "title": "Notes: An app may gain unauthorized access to Local Network",
      "component": "Notes",
      "impact": "An app may gain unauthorized access to Local Network",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43254",
      "url": "https://patchblox.com/security/cve/CVE-2025-43254",
      "title": "file: Processing a maliciously crafted file may lead to unexpected app termination",
      "component": "file",
      "impact": "Processing a maliciously crafted file may lead to unexpected app termination",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31243",
      "url": "https://patchblox.com/security/cve/CVE-2025-31243",
      "title": "AppleMobileFileIntegrity: An app may be able to gain root privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00221,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43256",
      "url": "https://patchblox.com/security/cve/CVE-2025-43256",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43257",
      "url": "https://patchblox.com/security/cve/CVE-2025-43257",
      "title": "Archive Utility: An app may be able to break out of its sandbox",
      "component": "Archive Utility",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.7,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43268",
      "url": "https://patchblox.com/security/cve/CVE-2025-43268",
      "title": "Kernel: A malicious app may be able to gain root privileges",
      "component": "Kernel",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43281",
      "url": "https://patchblox.com/security/cve/CVE-2025-43281",
      "title": "Application Firewall: A local attacker may be able to elevate their privileges",
      "component": "Application Firewall",
      "impact": "A local attacker may be able to elevate their privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24188",
      "url": "https://patchblox.com/security/cve/CVE-2025-24188",
      "title": "Safari: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "Safari",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00597,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43247",
      "url": "https://patchblox.com/security/cve/CVE-2025-43247",
      "title": "PackageKit: A malicious app with root privileges may be able to modify the contents of system files",
      "component": "PackageKit",
      "impact": "A malicious app with root privileges may be able to modify the contents of system files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43252",
      "url": "https://patchblox.com/security/cve/CVE-2025-43252",
      "title": "zip: A website may be able to access sensitive user data when resolving symlinks",
      "component": "zip",
      "impact": "A website may be able to access sensitive user data when resolving symlinks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43210",
      "url": "https://patchblox.com/security/cve/CVE-2025-43210",
      "title": "CoreMedia: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.3,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43276",
      "url": "https://patchblox.com/security/cve/CVE-2025-43276",
      "title": "Kernel: iCloud Private Relay may not activate when more than one user is logged in at the same time",
      "component": "Kernel",
      "impact": "iCloud Private Relay may not activate when more than one user is logged in at the same time",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.3,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43229",
      "url": "https://patchblox.com/security/cve/CVE-2025-43229",
      "title": "WebKit: Processing maliciously crafted web content may lead to universal cross site scripting",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to universal cross site scripting",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.1,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43259",
      "url": "https://patchblox.com/security/cve/CVE-2025-43259",
      "title": "WindowServer: An attacker with physical access to a locked device may be able to view sensitive user information",
      "component": "WindowServer",
      "impact": "An attacker with physical access to a locked device may be able to view sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.6,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43267",
      "url": "https://patchblox.com/security/cve/CVE-2025-43267",
      "title": "Directory Utility: An app may be able to access sensitive user data",
      "component": "Directory Utility",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0026,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43191",
      "url": "https://patchblox.com/security/cve/CVE-2025-43191",
      "title": "Admin Framework: An app may be able to cause a denial-of-service",
      "component": "Admin Framework",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43215",
      "url": "https://patchblox.com/security/cve/CVE-2025-43215",
      "title": "Model I/O: Processing a maliciously crafted image may result in disclosure of process memory",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted image may result in disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43250",
      "url": "https://patchblox.com/security/cve/CVE-2025-43250",
      "title": "SharedFileList: An app may be able to break out of its sandbox",
      "component": "SharedFileList",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43226",
      "url": "https://patchblox.com/security/cve/CVE-2025-43226",
      "title": "ImageIO: Processing a maliciously crafted image may result in disclosure of process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may result in disclosure of process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43206",
      "url": "https://patchblox.com/security/cve/CVE-2025-43206",
      "title": "System Settings: An app may be able to access protected user data",
      "component": "System Settings",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43218",
      "url": "https://patchblox.com/security/cve/CVE-2025-43218",
      "title": "Model I/O: Processing a maliciously crafted USD file may disclose memory contents",
      "component": "Model I/O",
      "impact": "Processing a maliciously crafted USD file may disclose memory contents",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00237,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43230",
      "url": "https://patchblox.com/security/cve/CVE-2025-43230",
      "title": "CoreMedia Playback: An app may be able to access user-sensitive data",
      "component": "CoreMedia Playback",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43260",
      "url": "https://patchblox.com/security/cve/CVE-2025-43260",
      "title": "PackageKit: An app may be able to hijack entitlements granted to other privileged apps",
      "component": "PackageKit",
      "impact": "An app may be able to hijack entitlements granted to other privileged apps",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43266",
      "url": "https://patchblox.com/security/cve/CVE-2025-43266",
      "title": "NSSpellChecker: An app may be able to break out of its sandbox",
      "component": "NSSpellChecker",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43195",
      "url": "https://patchblox.com/security/cve/CVE-2025-43195",
      "title": "CoreServices: An app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43225",
      "url": "https://patchblox.com/security/cve/CVE-2025-43225",
      "title": "Notes: An app may be able to access sensitive user data",
      "component": "Notes",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43246",
      "url": "https://patchblox.com/security/cve/CVE-2025-43246",
      "title": "Spotlight: An app may be able to access sensitive user data",
      "component": "Spotlight",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43241",
      "url": "https://patchblox.com/security/cve/CVE-2025-43241",
      "title": "SceneKit: An app may be able to read files outside of its sandbox",
      "component": "SceneKit",
      "impact": "An app may be able to read files outside of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31275",
      "url": "https://patchblox.com/security/cve/CVE-2025-31275",
      "title": "MediaRemote: A sandboxed process may be able to launch any installed app",
      "component": "MediaRemote",
      "impact": "A sandboxed process may be able to launch any installed app",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43255",
      "url": "https://patchblox.com/security/cve/CVE-2025-43255",
      "title": "GPU Drivers: An app may be able to cause unexpected system termination",
      "component": "GPU Drivers",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43197",
      "url": "https://patchblox.com/security/cve/CVE-2025-43197",
      "title": "Single Sign-On: An app may be able to access sensitive user data",
      "component": "Single Sign-On",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43238",
      "url": "https://patchblox.com/security/cve/CVE-2025-43238",
      "title": "Xsan: An app may be able to cause unexpected system termination",
      "component": "Xsan",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43235",
      "url": "https://patchblox.com/security/cve/CVE-2025-43235",
      "title": "Power Management: An app may be able to cause a denial-of-service",
      "component": "Power Management",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43236",
      "url": "https://patchblox.com/security/cve/CVE-2025-43236",
      "title": "Power Management: An attacker may be able to cause unexpected app termination",
      "component": "Power Management",
      "impact": "An attacker may be able to cause unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43251",
      "url": "https://patchblox.com/security/cve/CVE-2025-43251",
      "title": "User Management: A local attacker may gain access to Keychain items",
      "component": "User Management",
      "impact": "A local attacker may gain access to Keychain items",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43185",
      "url": "https://patchblox.com/security/cve/CVE-2025-43185",
      "title": "Voice Control: An app may be able to access protected user data",
      "component": "Voice Control",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43282",
      "url": "https://patchblox.com/security/cve/CVE-2025-43282",
      "title": "Kernel: An app may be able to cause unexpected system termination",
      "component": "Kernel",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43313",
      "url": "https://patchblox.com/security/cve/CVE-2025-43313",
      "title": "CoreServices: An app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43274",
      "url": "https://patchblox.com/security/cve/CVE-2025-43274",
      "title": "RemoteViewServices: A sandboxed process may be able to circumvent sandbox restrictions",
      "component": "RemoteViewServices",
      "impact": "A sandboxed process may be able to circumvent sandbox restrictions",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}