Apple operating systems vulnerabilities

The issue was addressed with improved memory handling. It is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may disclose sensitive information.

An integer overflow vulnerability was addressed with improved input validation. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An out-of-bounds write issue was addressed with improved input validation. Affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

A buffer overflow vulnerability was addressed with improved bounds checking. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS, iPadOS, macOS, tvOS, and visionOS. A remote attacker may cause unexpected application termination or heap corruption.

An authorization issue was addressed with improved validation. Affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may add contacts without user authorization.

The issue was addressed with improved memory handling. Affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An attacker in physical proximity may corrupt process memory.

A use after free issue was addressed with improved memory management. Affects iOS, iPadOS, macOS, tvOS, and visionOS. An app may cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. Affects iOS, iPadOS, macOS. An app may cause unexpected system termination.

An out-of-bounds write issue was addressed with improved bounds checking. Affects iOS, iPadOS, macOS. An app may cause unexpected system termination.

A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, visionOS 26.5, watchOS 26.5. An attacker in a privileged network position may be able to cause a denial-of-service.

An out-of-bounds read vulnerability that could allow a remote attacker to cause unexpected app termination. The issue was addressed with improved input validation.

An authorization issue, fixed with improved state management. An app may be able to access sensitive user data.

A permissions issue in Apple systems. Additional restrictions were added. An app may be able to read a persistent device identifier.

An out-of-bounds write vulnerability that could allow an attacker to cause unexpected app termination. The issue was addressed with improved bounds checking.

An inconsistent user interface issue, fixed with improved state management. A remote attacker may be able to bypass network filters.

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.7. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring.

An integer overflow vulnerability when processing a maliciously crafted image could lead to arbitrary code execution. The issue was addressed with improved input validation.

An out-of-bounds write issue in Apple systems may cause unexpected system termination by an app. This affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

A memory handling issue was addressed. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow an attacker to cause unexpected system termination or read kernel memory.

A vulnerability that could allow an app to cause unexpected system termination or write kernel memory. The issue was addressed with improved input sanitization.

A logic issue was addressed with improved restrictions. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow a malicious app to break out of its sandbox.

A vulnerability in image processing that could corrupt process memory. The issue was addressed with improved memory handling.

An out-of-bounds access issue was fixed with improved bounds checking. Affected are iOS 18.6, iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing a malicious media file may lead to unexpected app termination or memory corruption.

An issue existed in the handling of environment variables. This was addressed with improved validation. Fixed in iOS 26.3, iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, and watchOS 26.3. An app may be able to access sensitive user data.

A race condition was addressed with improved state handling. This issue affects Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) and may allow an app to gain root privileges.

A path handling issue was addressed with improved validation. This issue affects iOS, iPadOS, macOS, visionOS and may allow an app to gain root privileges.