{
  "fix": "Tahoe 26.2",
  "url": "https://patchblox.com/security/fix/macos/tahoe-26.2",
  "summary": "Tahoe 26.2, released December 12, 2025, fixes 52 CVEs in Tahoe. 2 of them are being exploited (CVE-2025-14174); 2 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "macos",
  "type": "os-version",
  "title": "Tahoe 26.2",
  "released": "2025-12-12T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2025-14174, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 52,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.55334,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.apple.com/en-us/125886",
  "appliesTo": [
    {
      "product": "Tahoe",
      "productUrl": "https://patchblox.com/security/product/macos/tahoe",
      "fixedVersion": "26.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-14174",
      "url": "https://patchblox.com/security/cve/CVE-2025-14174",
      "title": "Chromium: CVE-2025-14174 Out of bounds memory access in ANGLE",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.",
      "priority": "Patch now",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.55334,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43529",
      "url": "https://patchblox.com/security/cve/CVE-2025-43529",
      "title": "dyld: An attacker with memory write capability may be able to execute arbitrary code. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 and CVE-2025-43529 were also issued in response to this report.",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 26. CVE-2025-14174 was also issued in response to this report.",
      "priority": "Patch now",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.2565,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43428",
      "url": "https://patchblox.com/security/cve/CVE-2025-43428",
      "title": "Photos: Photos in the Hidden Photos Album may be viewed without authentication",
      "component": "Photos",
      "impact": "Photos in the Hidden Photos Album may be viewed without authentication",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00712,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43526",
      "url": "https://patchblox.com/security/cve/CVE-2025-43526",
      "title": "Safari: On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted",
      "component": "Safari",
      "impact": "On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that should be restricted",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46287",
      "url": "https://patchblox.com/security/cve/CVE-2025-46287",
      "title": "Calling Framework: An attacker may be able to spoof their FaceTime caller ID",
      "component": "Calling Framework",
      "impact": "An attacker may be able to spoof their FaceTime caller ID",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43416",
      "url": "https://patchblox.com/security/cve/CVE-2025-43416",
      "title": "sudo: An app may be able to access protected user data",
      "component": "sudo",
      "impact": "An app may be able to access protected user data",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46279",
      "url": "https://patchblox.com/security/cve/CVE-2025-46279",
      "title": "Icons: An app may be able to identify what other apps a user has installed",
      "component": "Icons",
      "impact": "An app may be able to identify what other apps a user has installed",
      "priority": "Urgent",
      "severity": "CRITICAL",
      "cvss": 9.8,
      "epss": 0.00367,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43541",
      "url": "https://patchblox.com/security/cve/CVE-2025-43541",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.3414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-7264",
      "url": "https://patchblox.com/security/cve/CVE-2024-7264",
      "title": "curl: Multiple issues in curl",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 7.5,
      "epss": 0.20217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43539",
      "url": "https://patchblox.com/security/cve/CVE-2025-43539",
      "title": "AppleJPEG: Processing a file may lead to memory corruption",
      "component": "AppleJPEG",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.06155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-9086",
      "url": "https://patchblox.com/security/cve/CVE-2025-9086",
      "title": "Out of bounds read for cookie path",
      "component": "curl",
      "impact": "Multiple issues in curl",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.01463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46290",
      "url": "https://patchblox.com/security/cve/CVE-2025-46290",
      "title": "Security: A remote attacker may be able to cause a denial-of-service",
      "component": "Security",
      "impact": "A remote attacker may be able to cause a denial-of-service",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00944,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43542",
      "url": "https://patchblox.com/security/cve/CVE-2025-43542",
      "title": "FaceTime: Password fields may be unintentionally revealed when remotely controlling a device over FaceTime",
      "component": "FaceTime",
      "impact": "Password fields may be unintentionally revealed when remotely controlling a device over FaceTime",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00857,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43535",
      "url": "https://patchblox.com/security/cve/CVE-2025-43535",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00849,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43501",
      "url": "https://patchblox.com/security/cve/CVE-2025-43501",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00773,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43536",
      "url": "https://patchblox.com/security/cve/CVE-2025-43536",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00577,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43511",
      "url": "https://patchblox.com/security/cve/CVE-2025-43511",
      "title": "WebKit Web Inspector: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit Web Inspector",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00462,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43531",
      "url": "https://patchblox.com/security/cve/CVE-2025-43531",
      "title": "WebKit: Processing maliciously crafted web content may lead to an unexpected process crash",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may lead to an unexpected process crash",
      "priority": "High",
      "severity": "LOW",
      "cvss": 8.8,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43519",
      "url": "https://patchblox.com/security/cve/CVE-2025-43519",
      "title": "SoftwareUpdate: An app may be able to access sensitive user data",
      "component": "SoftwareUpdate",
      "impact": "An app may be able to access sensitive user data",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.5,
      "epss": 0.00335,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46299",
      "url": "https://patchblox.com/security/cve/CVE-2025-46299",
      "title": "WebKit: Processing maliciously crafted web content may disclose internal states of the app",
      "component": "WebKit",
      "impact": "Processing maliciously crafted web content may disclose internal states of the app",
      "priority": "High",
      "severity": "MEDIUM",
      "cvss": 8.8,
      "epss": 0.00305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46281",
      "url": "https://patchblox.com/security/cve/CVE-2025-46281",
      "title": "File Bookmark: An app may be able to break out of its sandbox",
      "component": "File Bookmark",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.4,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46285",
      "url": "https://patchblox.com/security/cve/CVE-2025-46285",
      "title": "Kernel: An app may be able to gain root privileges",
      "component": "Kernel",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43512",
      "url": "https://patchblox.com/security/cve/CVE-2025-43512",
      "title": "Kernel: An app may be able to elevate privileges",
      "component": "Kernel",
      "impact": "An app may be able to elevate privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43527",
      "url": "https://patchblox.com/security/cve/CVE-2025-43527",
      "title": "StorageKit: An app may be able to gain root privileges",
      "component": "StorageKit",
      "impact": "An app may be able to gain root privileges",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43524",
      "url": "https://patchblox.com/security/cve/CVE-2025-43524",
      "title": "Icons: An app may be able to break out of its sandbox",
      "component": "Icons",
      "impact": "An app may be able to break out of its sandbox",
      "priority": "High",
      "severity": "HIGH",
      "cvss": 8.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43538",
      "url": "https://patchblox.com/security/cve/CVE-2025-43538",
      "title": "Screen Time: An app may be able to access sensitive user data",
      "component": "Screen Time",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.03014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-8906",
      "url": "https://patchblox.com/security/cve/CVE-2024-8906",
      "title": "Chromium: CVE-2024-8906 Incorrect security UI in Downloads",
      "component": "Safari Downloads",
      "impact": "A download\u0027s origin may be incorrectly associated",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 4.3,
      "epss": 0.00439,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-5918",
      "url": "https://patchblox.com/security/cve/CVE-2025-5918",
      "title": "Libarchive: reading past eof may be triggered for piped file streams",
      "component": "libarchive",
      "impact": "Processing a file may lead to memory corruption",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 6.6,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43533",
      "url": "https://patchblox.com/security/cve/CVE-2025-43533",
      "title": "Multi-Touch: A malicious HID device may cause an unexpected process crash",
      "component": "Multi-Touch",
      "impact": "A malicious HID device may cause an unexpected process crash",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.7,
      "epss": 0.00303,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43532",
      "url": "https://patchblox.com/security/cve/CVE-2025-43532",
      "title": "Foundation: Processing malicious data may lead to unexpected app termination",
      "component": "Foundation",
      "impact": "Processing malicious data may lead to unexpected app termination",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43410",
      "url": "https://patchblox.com/security/cve/CVE-2025-43410",
      "title": "Notes: An attacker with physical access may be able to view deleted notes",
      "component": "Notes",
      "impact": "An attacker with physical access may be able to view deleted notes",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 2.4,
      "epss": 0.00245,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43417",
      "url": "https://patchblox.com/security/cve/CVE-2025-43417",
      "title": "File Bookmark: An app may be able to access user-sensitive data",
      "component": "File Bookmark",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43530",
      "url": "https://patchblox.com/security/cve/CVE-2025-43530",
      "title": "VoiceOver: An app may be able to access sensitive user data",
      "component": "VoiceOver",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43509",
      "url": "https://patchblox.com/security/cve/CVE-2025-43509",
      "title": "Networking: An app may be able to access sensitive user data",
      "component": "Networking",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46289",
      "url": "https://patchblox.com/security/cve/CVE-2025-46289",
      "title": "AppSandbox: An app may be able to access protected user data",
      "component": "AppSandbox",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46291",
      "url": "https://patchblox.com/security/cve/CVE-2025-46291",
      "title": "LaunchServices: An app may bypass Gatekeeper checks",
      "component": "LaunchServices",
      "impact": "An app may bypass Gatekeeper checks",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43482",
      "url": "https://patchblox.com/security/cve/CVE-2025-43482",
      "title": "Audio: An app may be able to cause a denial-of-service",
      "component": "Audio",
      "impact": "An app may be able to cause a denial-of-service",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43513",
      "url": "https://patchblox.com/security/cve/CVE-2025-43513",
      "title": "MDM Configuration Tools: An app may be able to read sensitive location information",
      "component": "MDM Configuration Tools",
      "impact": "An app may be able to read sensitive location information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43523",
      "url": "https://patchblox.com/security/cve/CVE-2025-43523",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46283",
      "url": "https://patchblox.com/security/cve/CVE-2025-46283",
      "title": "CoreServices: An app may be able to access sensitive user data",
      "component": "CoreServices",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46277",
      "url": "https://patchblox.com/security/cve/CVE-2025-46277",
      "title": "Screen Time: An app may be able to access a user\u2019s Safari history",
      "component": "Screen Time",
      "impact": "An app may be able to access a user\u2019s Safari history",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46276",
      "url": "https://patchblox.com/security/cve/CVE-2025-46276",
      "title": "Messages: An app may be able to access sensitive user data",
      "component": "Messages",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43514",
      "url": "https://patchblox.com/security/cve/CVE-2025-43514",
      "title": "Siri: An app may be able to access protected user data",
      "component": "Siri",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43517",
      "url": "https://patchblox.com/security/cve/CVE-2025-43517",
      "title": "Call History: An app may be able to access protected user data",
      "component": "Call History",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46288",
      "url": "https://patchblox.com/security/cve/CVE-2025-46288",
      "title": "App Store: An app may be able to access sensitive payment tokens",
      "component": "App Store",
      "impact": "An app may be able to access sensitive payment tokens",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43516",
      "url": "https://patchblox.com/security/cve/CVE-2025-43516",
      "title": "Voice Control: A user with Voice Control enabled may be able to transcribe another user\u0027s activity",
      "component": "Voice Control",
      "impact": "A user with Voice Control enabled may be able to transcribe another user\u0027s activity",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46278",
      "url": "https://patchblox.com/security/cve/CVE-2025-46278",
      "title": "Game Center: An app may be able to access protected user data",
      "component": "Game Center",
      "impact": "An app may be able to access protected user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43518",
      "url": "https://patchblox.com/security/cve/CVE-2025-43518",
      "title": "Foundation: An app may be able to inappropriately access files through the spellcheck API",
      "component": "Foundation",
      "impact": "An app may be able to inappropriately access files through the spellcheck API",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46282",
      "url": "https://patchblox.com/security/cve/CVE-2025-46282",
      "title": "WebKit: An app may be able to access sensitive user data",
      "component": "WebKit",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-46297",
      "url": "https://patchblox.com/security/cve/CVE-2025-46297",
      "title": "AppSandbox: An app may be able to access protected files within an App Sandbox container",
      "component": "AppSandbox",
      "impact": "An app may be able to access protected files within an App Sandbox container",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43521",
      "url": "https://patchblox.com/security/cve/CVE-2025-43521",
      "title": "AppleMobileFileIntegrity: An app may be able to access sensitive user data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access sensitive user data",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-43522",
      "url": "https://patchblox.com/security/cve/CVE-2025-43522",
      "title": "AppleMobileFileIntegrity: An app may be able to access user-sensitive data",
      "component": "AppleMobileFileIntegrity",
      "impact": "An app may be able to access user-sensitive data",
      "priority": "Routine",
      "severity": "LOW",
      "cvss": 3.3,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}