macOS vulnerabilities

The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.

A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.

An out-of-bounds write issue in Apple products was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination or arbitrary code execution. This issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

A validation issue in entitlement verification in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. A malicious app may break out of its sandbox.

An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An integer overflow was addressed with improved input validation. An app may cause unexpected system termination.

A buffer overflow in macOS allows an app to execute arbitrary code out of its sandbox or with elevated privileges. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

An out-of-bounds write issue in Apple products was addressed with improved bounds checking. An app may be able to cause unexpected system termination. This issue is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6.

Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an attacker to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.

Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing an app to cause unexpected system termination or write kernel memory. Fixed with improved memory handling.

Vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a remote user to cause unexpected system termination or corrupt kernel memory. Fixed with improved memory handling.

Vulnerability in iPadOS and macOS allowing an app to access Safari bookmarks without proper entitlement check. Fixed in iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

This issue was addressed with improved state management. The flaw affects macOS Golden Gate 27 and allows a malicious app to bypass clickjacking protections for secure prompts.

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files.

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks.

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.

A logic issue was addressed with improved checks. The issue affects macOS Golden Gate 27. An app may be able to break out of its sandbox.

A certificate validation issue was found in macOS and fixed with improved certificate validation. An attacker in a privileged network position may be able to intercept network traffic.

This issue was addressed with additional entitlement checks. Fixed in macOS Golden Gate 27. An app may be able to gain root privileges.

A buffer overflow vulnerability in macOS, fixed with improved bounds checking. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An issue in macOS addressed with improved checks. An app may be able to break out of its sandbox.

A logic issue in macOS addressed with improved checks. An app may be able to break out of its sandbox.

An access issue in macOS addressed with additional sandbox restrictions. An app may be able to bypass sandbox restrictions.

An issue in macOS addressed with improved checks. An app may be able to access sensitive user data.

A permissions issue in macOS addressed with improved state management. An app may be able to bypass Privacy preferences.

An issue in macOS addressed with improved checks. An app may be able to access sensitive user data.

An out-of-bounds read in macOS addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.

A logic issue in macOS allows an app to bypass Gatekeeper checks. Apple addressed the flaw with improved checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An access issue with system pasteboards in macOS allows an app to access sensitive user data. The flaw was fixed with additional sandbox restrictions in macOS Golden Gate 27.

A path traversal issue was addressed with improved path validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network directory server may be able to execute arbitrary code with root privileges.

A memory handling issue in macOS allows an app to cause unexpected system termination. The flaw was addressed with improved memory handling in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An out-of-bounds read in macOS causes unexpected app termination when processing a maliciously crafted disk image. The flaw was addressed with improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

A logic issue in macOS allows an app to cause unexpected system termination. The flaw was addressed with improved checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

A race condition in macOS allows an app to access protected user data. The flaw was addressed with additional validation in macOS Tahoe 26.6.

A permissions issue was addressed with improved validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A malicious application may be able to access restricted files.

A double free issue was addressed with improved memory management. Fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.

An authorization issue was addressed with improved access control. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access sensitive user data.

An authorization issue was addressed with improved access control. Fixed in macOS Golden Gate 27 and macOS Sequoia 15.8. An app may be able to access sensitive user data.

An integer overflow was addressed with improved input validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An attacker in a privileged network position may be able to cause a denial-of-service.

A resource exhaustion issue was addressed with improved input validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.

A race condition was addressed with additional validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.