macOS vulnerabilities

The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.

A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.

An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An integer overflow was addressed with improved input validation. An app may cause unexpected system termination.

A buffer overflow in macOS allows an app to execute arbitrary code out of its sandbox or with elevated privileges. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

An out-of-bounds write issue in macOS may cause unexpected system termination by an app. This is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6.

Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an attacker to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.

Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an app to cause unexpected system termination or write kernel memory. Fixed with improved memory handling.

Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a remote user to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.

Vulnerability in iPadOS and macOS allowing an app to access Safari bookmarks without proper entitlement check. Fixed in iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.

A lock screen issue in macOS fixed with additional restrictions. A person with physical access to a locked device may access contacts and photos.

An authorization issue in macOS. State management was improved. A malicious app may be able to break out of its sandbox.

A denial of service issue in macOS Tahoe. Fixed by removing vulnerable code. A local attacker may cause a denial of service.

An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. An app may access sensitive user data.

An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may access sensitive user data.

A path traversal issue was fixed with improved input validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may break out of its sandbox.

A stack overflow was fixed with improved input validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause a denial-of-service.

A race condition was fixed with additional validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and tvOS 26.6. An app may access sensitive user data.

The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.

The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.

An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An attacker with physical access to a locked device may view sensitive user information.

Improved handling of symlinks in macOS. An app may be able to modify protected parts of the file system.

A permissions issue was addressed by removing the vulnerable code. An app may read files outside its sandbox.

An access issue was addressed with improved access restrictions. An app may access user-sensitive data.

A logic issue was addressed with improved validation. An app may access user-sensitive data.

A race condition was addressed with improved state management in macOS. The issue is fixed in macOS Sonoma 14.8.8 and macOS Tahoe 26.6.

A parsing issue in directory path handling was fixed with improved validation in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

An out-of-bounds read when parsing a maliciously crafted file may lead to unexpected app termination. This is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Vulnerability in macOS Tahoe allowing an attacker to modify the state of the Keychain. Fixed through improved state management.

An injection vulnerability in macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8, addressed with improved validation. An app may be able to gain root privileges.

A race condition was fixed with improved state handling in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Buffer overflow vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a local user to read kernel memory. Fixed with improved bounds checking.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A race condition was addressed with improved state handling. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to elevate privileges.

A file quarantine bypass was addressed with additional checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.

The issue was addressed with improved checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.

An information disclosure issue was addressed with improved privacy controls. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.3. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. An app may be able to cause unexpected system termination.

A person with access to a Mac may bypass the Login Window. The issue is fixed in macOS Monterey 12.4 with improved state handling.

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.

A logic issue was addressed with improved restrictions in macOS Tahoe 26. This issue allowed an app to access sensitive user data.

A race condition was addressed with additional validation in macOS Sequoia 15.7 and macOS Tahoe 26. An app may be able to gain root privileges.

macOS Tahoe 26 addresses an out-of-bounds read issue with improved bounds checking. An app may cause unexpected system termination.

In macOS Tahoe 26, vulnerable code was removed to address a permissions issue that could allow an app to access sensitive user data.

A logic issue in macOS allows a malicious app to gain root privileges. The flaw is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.

A permissions issue in macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. An app may be able to modify protected parts of the file system.