{
  "fix": "Tahoe 26.0",
  "url": "https://patchblox.com/security/fix/macos/tahoe-26.0",
  "summary": "Tahoe 26.0, released September 15, 2025, fixes 94 CVEs in Tahoe. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "macos",
  "type": "os-version",
  "title": "Tahoe 26.0",
  "released": "2025-09-15T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2024-27280, rated Critical",
  "supported": true,
  "cveCount": 94,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.73452,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/125110",
  "appliesTo": [
    {
      "product": "Tahoe",
      "productUrl": "https://patchblox.com/security/product/macos/tahoe",
      "fixedVersion": "26.0",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-27280",
      "url": "https://patchblox.com/security/cve/CVE-2024-27280",
      "title": "Ruby: Processing a file may lead to a denial-of-service or potentially disclose memory contents",
      "component": "Ruby",
      "impact": "Processing a file may lead to a denial-of-service or potentially disclose memory contents",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.02364,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31255",
      "url": "https://patchblox.com/security/cve/CVE-2025-31255",
      "title": "IOKit: An app may be able to access sensitive user data",
      "component": "IOKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.01627,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43359",
      "url": "https://patchblox.com/security/cve/CVE-2025-43359",
      "title": "Kernel: A UDP server socket bound to a local interface may become bound to all interfaces",
      "component": "Kernel",
      "impact": "A UDP server socket bound to a local interface may become bound to all interfaces",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.0096,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43347",
      "url": "https://patchblox.com/security/cve/CVE-2025-43347",
      "title": "System: An input validation issue was addressed",
      "component": "System",
      "impact": "An input validation issue was addressed",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00924,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43343",
      "url": "https://patchblox.com/security/cve/CVE-2025-43343",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00804,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43342",
      "url": "https://patchblox.com/security/cve/CVE-2025-43342",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00774,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6965",
      "url": "https://patchblox.com/security/cve/CVE-2025-6965",
      "title": "SQLite: Processing a file may lead to memory corruption",
      "component": "SQLite",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.7,
      "epss": 0.73452,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43272",
      "url": "https://patchblox.com/security/cve/CVE-2025-43272",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.01079,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43376",
      "url": "https://patchblox.com/security/cve/CVE-2025-43376",
      "title": "WebKit: A remote attacker may be able to view leaked DNS queries with Private Relay turned on",
      "component": "WebKit",
      "impact": "A remote attacker may be able to view leaked DNS queries with Private Relay turned on",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.0082,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43368",
      "url": "https://patchblox.com/security/cve/CVE-2025-43368",
      "title": "WebKit Process Model: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit Process Model",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00806,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43356",
      "url": "https://patchblox.com/security/cve/CVE-2025-43356",
      "title": "WebKit: A website may be able to access sensor information without user consent",
      "component": "WebKit",
      "impact": "A website may be able to access sensor information without user consent",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00671,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24088",
      "url": "https://patchblox.com/security/cve/CVE-2025-24088",
      "title": "CoreServices: An app may be able to override MDM-enforced settings from profiles",
      "component": "CoreServices",
      "impact": "An app may be able to override MDM-enforced settings from profiles",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00476,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43419",
      "url": "https://patchblox.com/security/cve/CVE-2025-43419",
      "title": "WebKit: Processing maliciously crafted web content may lead to memory corruption",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31271",
      "url": "https://patchblox.com/security/cve/CVE-2025-31271",
      "title": "FaceTime: Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen",
      "component": "FaceTime",
      "impact": "Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43323",
      "url": "https://patchblox.com/security/cve/CVE-2025-43323",
      "title": "CloudKit: An app may be able to fingerprint the user",
      "component": "CloudKit",
      "impact": "An app may be able to fingerprint the user",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.1,
      "epss": 0.00396,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43204",
      "url": "https://patchblox.com/security/cve/CVE-2025-43204",
      "title": "RemoteViewServices: An app may be able to break out of its sandbox",
      "component": "RemoteViewServices",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00342,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43333",
      "url": "https://patchblox.com/security/cve/CVE-2025-43333",
      "title": "Spotlight: An app may be able to gain root privileges",
      "component": "Spotlight",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00342,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43316",
      "url": "https://patchblox.com/security/cve/CVE-2025-43316",
      "title": "DiskArbitration: A malicious app may be able to gain root privileges",
      "component": "DiskArbitration",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00323,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43329",
      "url": "https://patchblox.com/security/cve/CVE-2025-43329",
      "title": "Sandbox: An app may be able to break out of its sandbox",
      "component": "Sandbox",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00314,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43358",
      "url": "https://patchblox.com/security/cve/CVE-2025-43358",
      "title": "Shortcuts: A shortcut may be able to bypass sandbox restrictions",
      "component": "Shortcuts",
      "impact": "A shortcut may be able to bypass sandbox restrictions",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43338",
      "url": "https://patchblox.com/security/cve/CVE-2025-43338",
      "title": "ImageIO: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43304",
      "url": "https://patchblox.com/security/cve/CVE-2025-43304",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31259",
      "url": "https://patchblox.com/security/cve/CVE-2025-31259",
      "title": "Screenshots: An app may be able to capture a screenshot of an app entering or exiting full screen mode",
      "component": "Screenshots",
      "impact": "An app may be able to capture a screenshot of an app entering or exiting full screen mode",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0025,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43298",
      "url": "https://patchblox.com/security/cve/CVE-2025-43298",
      "title": "PackageKit: An app may be able to gain root privileges",
      "component": "PackageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43330",
      "url": "https://patchblox.com/security/cve/CVE-2025-43330",
      "title": "ATS: An app may be able to break out of its sandbox",
      "component": "ATS",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.2,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43287",
      "url": "https://patchblox.com/security/cve/CVE-2025-43287",
      "title": "ImageIO: Processing a maliciously crafted image may corrupt process memory",
      "component": "ImageIO",
      "impact": "Processing a maliciously crafted image may corrupt process memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.1,
      "epss": 0.00226,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43361",
      "url": "https://patchblox.com/security/cve/CVE-2025-43361",
      "title": "Audio: A malicious app may be able to read kernel memory",
      "component": "Audio",
      "impact": "A malicious app may be able to read kernel memory",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43286",
      "url": "https://patchblox.com/security/cve/CVE-2025-43286",
      "title": "SharedFileList: An app may be able to break out of its sandbox",
      "component": "SharedFileList",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43340",
      "url": "https://patchblox.com/security/cve/CVE-2025-43340",
      "title": "AppleMobileFileIntegrity: An app may be able to break out of its sandbox",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43320",
      "url": "https://patchblox.com/security/cve/CVE-2025-43320",
      "title": "AppleMobileFileIntegrity: An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to bypass launch constraint protections and execute malicious code with elevated privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43341",
      "url": "https://patchblox.com/security/cve/CVE-2025-43341",
      "title": "Storage: An app may be able to gain root privileges",
      "component": "Storage",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43306",
      "url": "https://patchblox.com/security/cve/CVE-2025-43306",
      "title": "StorageKit: A malicious app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "A malicious app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46284",
      "url": "https://patchblox.com/security/cve/CVE-2025-46284",
      "title": "Crash Reporter: An app may be able to gain root privileges",
      "component": "Crash Reporter",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7,
      "epss": 0.00103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43349",
      "url": "https://patchblox.com/security/cve/CVE-2025-43349",
      "title": "CoreAudio: Processing a maliciously crafted video file may lead to unexpected app termination",
      "component": "CoreAudio",
      "impact": "Processing a maliciously crafted video file may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.8,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43372",
      "url": "https://patchblox.com/security/cve/CVE-2025-43372",
      "title": "ImageIO: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "CoreMedia",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00515,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40909",
      "url": "https://patchblox.com/security/cve/CVE-2025-40909",
      "title": "Perl threads have a working directory race condition where file operations may target unintended paths",
      "component": "Perl",
      "impact": "Multiple issues in Perl",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43327",
      "url": "https://patchblox.com/security/cve/CVE-2025-43327",
      "title": "Safari: Visiting a malicious website may lead to address bar spoofing",
      "component": "Safari",
      "impact": "Visiting a malicious website may lead to address bar spoofing",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.00497,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43283",
      "url": "https://patchblox.com/security/cve/CVE-2025-43283",
      "title": "GPU Drivers: An app may be able to cause unexpected system termination",
      "component": "GPU Drivers",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00402,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43308",
      "url": "https://patchblox.com/security/cve/CVE-2025-43308",
      "title": "Touch Bar Controls: An app may be able to access sensitive user data",
      "component": "Touch Bar Controls",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00402,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43297",
      "url": "https://patchblox.com/security/cve/CVE-2025-43297",
      "title": "Power Management: An app may be able to cause a denial-of-service",
      "component": "Power Management",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43285",
      "url": "https://patchblox.com/security/cve/CVE-2025-43285",
      "title": "AppSandbox: An app may be able to access protected user data",
      "component": "AppSandbox",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43344",
      "url": "https://patchblox.com/security/cve/CVE-2025-43344",
      "title": "Apple Neural Engine: An app may be able to cause unexpected system termination",
      "component": "Apple Neural Engine",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43190",
      "url": "https://patchblox.com/security/cve/CVE-2025-43190",
      "title": "Spell Check: An app may be able to access sensitive user data",
      "component": "Spell Check",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43302",
      "url": "https://patchblox.com/security/cve/CVE-2025-43302",
      "title": "IOHIDFamily: An app may be able to cause unexpected system termination",
      "component": "IOHIDFamily",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43312",
      "url": "https://patchblox.com/security/cve/CVE-2025-43312",
      "title": "AMD: An app may be able to cause unexpected system termination",
      "component": "AMD",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43314",
      "url": "https://patchblox.com/security/cve/CVE-2025-43314",
      "title": "StorageKit: An app may be able to access sensitive user data",
      "component": "StorageKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43346",
      "url": "https://patchblox.com/security/cve/CVE-2025-43346",
      "title": "Audio: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "component": "Audio",
      "impact": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00238,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43355",
      "url": "https://patchblox.com/security/cve/CVE-2025-43355",
      "title": "MobileStorageMounter: An app may be able to cause a denial-of-service",
      "component": "MobileStorageMounter",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43293",
      "url": "https://patchblox.com/security/cve/CVE-2025-43293",
      "title": "SharedFileList: An app may be able to access sensitive user data",
      "component": "SharedFileList",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43299",
      "url": "https://patchblox.com/security/cve/CVE-2025-43299",
      "title": "libc: An app may be able to cause a denial-of-service",
      "component": "libc",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43311",
      "url": "https://patchblox.com/security/cve/CVE-2025-43311",
      "title": "Touch Bar: An app may be able to access protected user data",
      "component": "Touch Bar",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43301",
      "url": "https://patchblox.com/security/cve/CVE-2025-43301",
      "title": "Notification Center: An app may be able to access contact info related to notifications in Notification Center",
      "component": "Notification Center",
      "impact": "An app may be able to access contact info related to notifications in Notification Center",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0023,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43357",
      "url": "https://patchblox.com/security/cve/CVE-2025-43357",
      "title": "Call History: An app may be able to fingerprint the user",
      "component": "Call History",
      "impact": "An app may be able to fingerprint the user",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43354",
      "url": "https://patchblox.com/security/cve/CVE-2025-43354",
      "title": "Bluetooth: An app may be able to access sensitive user data",
      "component": "Bluetooth",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43326",
      "url": "https://patchblox.com/security/cve/CVE-2025-43326",
      "title": "GPU Drivers: An app may be able to access sensitive user data",
      "component": "GPU Drivers",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43305",
      "url": "https://patchblox.com/security/cve/CVE-2025-43305",
      "title": "CoreServices: A malicious app may be able to access private information",
      "component": "CoreServices",
      "impact": "A malicious app may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43317",
      "url": "https://patchblox.com/security/cve/CVE-2025-43317",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43319",
      "url": "https://patchblox.com/security/cve/CVE-2025-43319",
      "title": "MediaLibrary: An app may be able to access protected user data",
      "component": "MediaLibrary",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43321",
      "url": "https://patchblox.com/security/cve/CVE-2025-43321",
      "title": "AppKit: An app may be able to access protected user data",
      "component": "AppKit",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00223,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31269",
      "url": "https://patchblox.com/security/cve/CVE-2025-31269",
      "title": "Printing: An app may be able to access protected user data",
      "component": "Printing",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43291",
      "url": "https://patchblox.com/security/cve/CVE-2025-43291",
      "title": "SharedFileList: An app may be able to modify protected parts of the file system",
      "component": "SharedFileList",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43367",
      "url": "https://patchblox.com/security/cve/CVE-2025-43367",
      "title": "Siri: An app may be able to access protected user data",
      "component": "Siri",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-24197",
      "url": "https://patchblox.com/security/cve/CVE-2025-24197",
      "title": "Spotlight: An app may be able to access sensitive user data",
      "component": "Spotlight",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31268",
      "url": "https://patchblox.com/security/cve/CVE-2025-31268",
      "title": "Apple Online Store Kit: An app may be able to access protected user data",
      "component": "Apple Online Store Kit",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43315",
      "url": "https://patchblox.com/security/cve/CVE-2025-43315",
      "title": "MigrationKit: An app may be able to access user-sensitive data",
      "component": "MigrationKit",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43310",
      "url": "https://patchblox.com/security/cve/CVE-2025-43310",
      "title": "WindowServer: An app may be able to trick a user into copying sensitive data to the pasteboard",
      "component": "WindowServer",
      "impact": "An app may be able to trick a user into copying sensitive data to the pasteboard",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.4,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43279",
      "url": "https://patchblox.com/security/cve/CVE-2025-43279",
      "title": "Notification Center: An app may be able to access user-sensitive data",
      "component": "Notification Center",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43325",
      "url": "https://patchblox.com/security/cve/CVE-2025-43325",
      "title": "Icons: An app may be able to access sensitive user data",
      "component": "Icons",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43366",
      "url": "https://patchblox.com/security/cve/CVE-2025-43366",
      "title": "IOMobileFrameBuffer: An app may be able to disclose coprocessor memory",
      "component": "IOMobileFrameBuffer",
      "impact": "An app may be able to disclose coprocessor memory",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43353",
      "url": "https://patchblox.com/security/cve/CVE-2025-43353",
      "title": "Libinfo: Processing a maliciously crafted string may lead to heap corruption",
      "component": "Libinfo",
      "impact": "Processing a maliciously crafted string may lead to heap corruption",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43318",
      "url": "https://patchblox.com/security/cve/CVE-2025-43318",
      "title": "Sandbox: An app with root privileges may be able to access private information",
      "component": "Sandbox",
      "impact": "An app with root privileges may be able to access private information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.2,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-31270",
      "url": "https://patchblox.com/security/cve/CVE-2025-31270",
      "title": "Foundation: An app may be able to access protected user data",
      "component": "Foundation",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43207",
      "url": "https://patchblox.com/security/cve/CVE-2025-43207",
      "title": "Music: An app may be able to access user-sensitive data",
      "component": "Music",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43208",
      "url": "https://patchblox.com/security/cve/CVE-2025-43208",
      "title": "AirPort: An app may be able to read sensitive location information",
      "component": "AirPort",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43403",
      "url": "https://patchblox.com/security/cve/CVE-2025-43403",
      "title": "Compression: An app may be able to access sensitive user data",
      "component": "Compression",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43262",
      "url": "https://patchblox.com/security/cve/CVE-2025-43262",
      "title": "Trusted Device: USB Restricted Mode may not be applied to accessories connected during boot",
      "component": "Trusted Device",
      "impact": "USB Restricted Mode may not be applied to accessories connected during boot",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.1,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43332",
      "url": "https://patchblox.com/security/cve/CVE-2025-43332",
      "title": "Security Initialization: An app may be able to break out of its sandbox",
      "component": "Security Initialization",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.2,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43331",
      "url": "https://patchblox.com/security/cve/CVE-2025-43331",
      "title": "AppleMobileFileIntegrity: An app may be able to access protected user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43307",
      "url": "https://patchblox.com/security/cve/CVE-2025-43307",
      "title": "Bluetooth: An app may be able to access sensitive user data",
      "component": "Bluetooth",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43288",
      "url": "https://patchblox.com/security/cve/CVE-2025-43288",
      "title": "Archive Utility: An app may be able to bypass Privacy preferences",
      "component": "Archive Utility",
      "impact": "An app may be able to bypass Privacy preferences",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43337",
      "url": "https://patchblox.com/security/cve/CVE-2025-43337",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43369",
      "url": "https://patchblox.com/security/cve/CVE-2025-43369",
      "title": "SharedFileList: An app may be able to access protected user data",
      "component": "SharedFileList",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46310",
      "url": "https://patchblox.com/security/cve/CVE-2025-46310",
      "title": "PackageKit: An attacker with root privileges may be able to delete protected system files",
      "component": "PackageKit",
      "impact": "An attacker with root privileges may be able to delete protected system files",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43294",
      "url": "https://patchblox.com/security/cve/CVE-2025-43294",
      "title": "MallocStackLogging: An app may be able to access sensitive user data",
      "component": "MallocStackLogging",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43292",
      "url": "https://patchblox.com/security/cve/CVE-2025-43292",
      "title": "CoreMedia: An app may be able to access sensitive user data",
      "component": "CoreMedia",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43328",
      "url": "https://patchblox.com/security/cve/CVE-2025-43328",
      "title": "Sandbox: An app may be able to access sensitive user data",
      "component": "Sandbox",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43345",
      "url": "https://patchblox.com/security/cve/CVE-2025-43345",
      "title": "Kernel: An app may be able to access sensitive user data",
      "component": "Kernel",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46307",
      "url": "https://patchblox.com/security/cve/CVE-2025-46307",
      "title": "Sandbox: An app may be able to access sensitive user data",
      "component": "Sandbox",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46306",
      "url": "https://patchblox.com/security/cve/CVE-2025-46306",
      "title": "QuickLook: Processing a maliciously crafted Keynote file may disclose memory contents",
      "component": "QuickLook",
      "impact": "Processing a maliciously crafted Keynote file may disclose memory contents",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43296",
      "url": "https://patchblox.com/security/cve/CVE-2025-43296",
      "title": "System Settings: An app may bypass Gatekeeper checks",
      "component": "System Settings",
      "impact": "An app may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43289",
      "url": "https://patchblox.com/security/cve/CVE-2025-43289",
      "title": "CoreServices: A malicious app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "A malicious app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46280",
      "url": "https://patchblox.com/security/cve/CVE-2025-46280",
      "title": "GPU Drivers: An app may be able to cause unexpected system termination",
      "component": "GPU Drivers",
      "impact": "An app may be able to cause unexpected system termination",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43451",
      "url": "https://patchblox.com/security/cve/CVE-2025-43451",
      "title": "AWD: An app may be able to access sensitive user data",
      "component": "AWD",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43290",
      "url": "https://patchblox.com/security/cve/CVE-2025-43290",
      "title": "CoreServices: An app may be able to modify protected parts of the file system",
      "component": "CoreServices",
      "impact": "An app may be able to modify protected parts of the file system",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}