Apple macOS vulnerabilities

A memory initialization issue was fixed with improved memory handling. The vulnerability affects macOS systems. An app may disclose kernel memory.

Additional sandbox restrictions were introduced in macOS Tahoe. An app may be able to access sensitive user data.

Improved checks in macOS. An app may access sensitive user data.

Improved race condition handling in macOS. An app may access sensitive user data.

Improved input validation in macOS. A remote attacker may cause a denial of service.

A permissions issue addressed by removing the vulnerable code affects macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to read files outside of its sandbox.

A malicious application may be able to bypass Privacy preferences. An authorization issue was addressed with improved state management.

A local attacker may be able to determine the legacy VNC password configured for Screen Sharing. This issue was addressed with additional entitlement checks.

Processing a maliciously crafted image may lead to arbitrary code execution. A buffer overflow was addressed with improved bounds checking.

An app may be able to bypass network restrictions. A permissions issue was addressed with additional sandbox restrictions.

An app may be able to cause a denial of service. A logic issue existed resulting in memory corruption, addressed with improved state management.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges.

A privacy issue was addressed with improved handling of temporary files. This issue affects macOS. An app may be able to capture a user's screen.

A logic issue was addressed with improved validation. This issue affects macOS. An app may bypass Gatekeeper checks.

A logic issue was addressed with improved checks. This issue affects macOS. An app may be able to break out of its sandbox.