Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS vulnerabilities

An out-of-bounds access issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted image may result in memory corruption.

This issue was addressed with improved redaction of sensitive information. It is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to disclose kernel memory.

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.

A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to cause unexpected system termination.

The issue was addressed with improved memory handling. It is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

An authorization issue was addressed with improved state management. The flaw affects iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

The issue was addressed with improved memory handling. The issue affects iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

A vulnerability in Apple systems, fixed with improved memory handling. An attacker on the local network may be able to cause a denial-of-service.

A vulnerability in Apple systems, fixed through improved state management. An app may be able to access sensitive user data.

The issue was addressed with improved memory handling. It affects Apple systems and may allow an app to disclose kernel memory.

A type confusion issue was addressed with improved checks. Processing a maliciously crafted image may lead to a denial-of-service.

This issue was addressed with improved checks. An app may be able to access sensitive user data.

This issue was addressed with improved data protection. An app may be able to read a persistent device identifier.

Improved input validation for integer overflow across multiple Apple systems. Processing a maliciously crafted texture may cause unexpected app termination.

An out-of-bounds write issue was addressed with improved bounds checking. Processing an audio stream in a maliciously crafted media file may terminate the process.

The issue was addressed with improved input sanitization. A malicious app may be able to access protected user data.

Type checking was improved in Apple systems. A remote attacker may be able to cause a denial of service.