Apple macOS vulnerabilities

A buffer overflow vulnerability in macOS Golden Gate, fixed by improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

A buffer overflow vulnerability in macOS allows a remote attacker to cause unexpected system termination or corrupt kernel memory.

Path validation was improved. The issue affects macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

A type confusion issue was addressed with improved memory handling. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

A use after free issue was addressed with improved memory management. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause a denial-of-service.

An access issue was addressed with additional sandbox restrictions. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to break out of its sandbox.

A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or read kernel memory.

A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. An app may cause unexpected system termination or corrupt kernel memory.

A memory handling issue was fixed with improved memory management. The vulnerability affects macOS systems. A remote user may cause unexpected system termination or corrupt kernel memory.

An integer overflow issue was fixed with improved input validation. The vulnerability affects macOS systems. An app may cause unexpected system termination.

Improved validation of environment variables in macOS. An app may cause unexpected system termination.

Improved logic restrictions in macOS. An app may intercept network connections intended for another process.

Connecting to a malicious SMB server may lead to unexpected system termination. The issue was addressed with improved memory handling.

A remote user may be able to cause unexpected system termination or corrupt kernel memory. A race condition was addressed with improved locking.

A memory handling vulnerability in macOS systems. A malicious app may corrupt memory of a system process.

An out-of-bounds write issue was addressed with improved bounds checking. This affects macOS. An app may be able to cause unexpected system termination or write kernel memory.

A permissions issue was addressed with improved validation. This affects macOS. An app may be able to access sensitive user data.

An integer overflow in NFS connection handling, addressed with improved input validation. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.

An out-of-bounds access issue in SMB connection handling, addressed with improved bounds checking. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory.

An input validation issue, addressed with improved input validation. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An application may be able to access restricted files.

An authorization issue, addressed with improved state management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access sensitive user data.

A memory handling issue, addressed with improved memory handling. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory.

An integer underflow in SMB connection handling, addressed with improved input validation. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination.

An authorization issue, addressed with improved state management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to break out of its sandbox.

A logging issue in Apple systems was addressed with improved data redaction. An app may be able to access user-sensitive data.

A race condition vulnerability in macOS Golden Gate, fixed by improved state management. An app may be able to access sensitive user data.

An integer overflow vulnerability in macOS systems, fixed by improved input validation. An app may be able to cause unexpected system termination.

An out-of-bounds read vulnerability in macOS systems, fixed by improved bounds checking. Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory.

An out-of-bounds write vulnerability in macOS systems, fixed by improved bounds checking. Connecting to a malicious SMB server may lead to kernel memory corruption.

A vulnerability in macOS systems, fixed by additional entitlement checks. An app may be able to modify protected parts of the file system.

A buffer overflow was addressed with improved bounds checking. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An out-of-bounds read was addressed with improved bounds checking. Connecting to a malicious SMB server may lead to unexpected system termination.

A use after free issue was addressed with improved memory management. An app may be able to execute arbitrary code with kernel privileges.

An integer overflow vulnerability in Apple systems, fixed with improved input validation. An app may cause a denial of service.

A race condition was addressed with improved state handling. The vulnerability affects macOS Golden Gate 27 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption.

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files.

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information.

An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination.

A logic issue was addressed with improved state management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access protected user data.

A use-after-free issue was addressed with improved memory management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Mounting a maliciously crafted SMB network share may lead to system termination.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.

An authorization issue was addressed with improved entitlement checks. The flaw affects macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization.

A privacy issue was addressed by removing sensitive data. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.

A file quarantine bypass was addressed with additional checks. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may bypass Gatekeeper checks.