Apple operating systems vulnerabilities

The issue was addressed with improved memory handling. It is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

An integer overflow vulnerability was addressed with improved input validation. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An out-of-bounds write issue was addressed with improved input validation. Affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

A buffer overflow vulnerability was addressed with improved bounds checking. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An authorization issue was addressed with improved validation. Affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may add contacts without user authorization.

The issue was addressed with improved memory handling. Affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An attacker in physical proximity may corrupt process memory.

A use after free issue was addressed with improved memory management. Affects iOS, iPadOS, macOS, tvOS, and visionOS. An app may cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. Affects iOS, iPadOS, macOS. An app may cause unexpected system termination.

An out-of-bounds write issue was addressed with improved bounds checking. Affects iOS, iPadOS, macOS. An app may cause unexpected system termination.

An out-of-bounds read issue was fixed with improved input validation. Processing a maliciously crafted font may disclose process memory. The fix is included in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.

An out-of-bounds read was fixed with improved bounds checking. Processing a maliciously crafted font may disclose process memory. The fix is included in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.

A use after free issue was fixed with improved memory management. An app may cause unexpected system termination. The fix is included in iOS 27 and iPadOS 27.

A permissions issue was fixed with additional restrictions. An app may be able to modify Privacy preferences. The fix is included in macOS Golden Gate 27.

A memory corruption issue was fixed by removing the vulnerable code. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. The fix is included in macOS Golden Gate 27.

A permissions issue was fixed with additional restrictions. An app may be able to access protected user data. The fix is included in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An information disclosure issue was fixed with improved state management. A malicious application may leak sensitive user information. The fix is included in macOS Golden Gate 27 and watchOS 27.

A permissions issue was fixed with improved state management. An app may be able to access local network devices without user consent. The fix is included in macOS Golden Gate 27.

This issue was fixed with improved handling of symlinks. An app may be able to break out of its sandbox. The fix is included in macOS Golden Gate 27.

A permissions issue was fixed with additional restrictions. A local app may be able to read a persistent account identifier. The fix is included in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

A memory corruption issue was addressed with improved input validation in iOS 27, iPadOS 27, and macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.

The issue was addressed with improved memory handling in multiple Apple systems. Connecting to a malicious NFS server may disclose kernel memory.

A use-after-free issue was addressed with improved memory management in Apple systems. Connecting to a malicious NFS server may lead to kernel memory corruption.

A use-after-free issue was addressed with improved memory management in iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.

An integer overflow was fixed with improved input validation. The vulnerability affects Apple systems and was resolved in multiple versions. Processing an image may lead to arbitrary code execution.

A use-after-free vulnerability was fixed with improved memory management. The issue affects Apple systems and was resolved in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. A remote attacker may cause unexpected system termination.

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to cause a denial-of-service.

An out-of-bounds read vulnerability that could allow a remote attacker to cause unexpected app termination. The issue was addressed with improved input validation.

An authorization issue, fixed with improved state management. An app may be able to access sensitive user data.

A permissions issue in Apple systems. Additional restrictions were added. An app may be able to read a persistent device identifier.

An out-of-bounds write vulnerability that could allow an attacker to cause unexpected app termination. The issue was addressed with improved bounds checking.

An inconsistent user interface issue, fixed with improved state management. A remote attacker may be able to bypass network filters.

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.

An integer overflow vulnerability when processing a maliciously crafted image could lead to arbitrary code execution. The issue was addressed with improved input validation.

An out-of-bounds write issue in Apple systems may cause unexpected system termination by an app. This affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

A memory handling issue was addressed. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow an attacker to cause unexpected system termination or read kernel memory.

A vulnerability that could allow an app to cause unexpected system termination or write kernel memory. The issue was addressed with improved input sanitization.

A logic issue was addressed with improved restrictions. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow a malicious app to break out of its sandbox.

A vulnerability in image processing that could corrupt process memory. The issue was addressed with improved memory handling.

A use-after-free vulnerability was fixed with improved memory management. The issue affects Apple systems and was resolved in multiple versions of iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may cause unexpected system termination.

An out-of-bounds access issue was fixed with improved bounds checking. Affected are iOS 18.6, iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a malicious media file may lead to unexpected app termination or memory corruption.

An issue existed in the handling of environment variables. This was addressed with improved validation. Fixed in iOS 26.3, iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, and watchOS 26.3. An app may be able to access sensitive user data.