macOS vulnerabilities

macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26 fix a logic issue that could allow a malicious app to access sensitive user data.

Improved checks in macOS prevent an attacker with physical access to a locked device from viewing sensitive user information.

Improved file handling in macOS prevents a maliciously crafted ZIP archive from bypassing Gatekeeper checks.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.4. An app may be able to access sensitive user data.

macOS Sequoia 15.6 fixes a memory handling issue when processing maliciously crafted images. This vulnerability could corrupt process memory.

Improved symlink handling in macOS Sequoia 15.6 prevents an app from breaking out of its sandbox.

In macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, an integer overflow was fixed with improved input validation. An app may be able to cause unexpected system termination.

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.

A vulnerability in macOS Sequoia 15.6 allows process memory corruption when processing a maliciously crafted image. The issue was addressed with improved memory handling.

The issue was addressed with improved checks in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system.

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on a locked device.

In macOS Sequoia 15.1, a permissions issue was fixed that allowed an app to execute arbitrary code out of its sandbox or with elevated privileges.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious application with root privileges may be able to access private information.

A permissions issue in macOS Sequoia allowed apps to access Contacts without user consent. This is fixed in macOS Sequoia 15.1.

A race condition was fixed in macOS Sequoia 15.1 that allowed an app to break out of its sandbox. The vulnerability exists in an unspecified system component.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3. An app may be able to access protected user data.

A permissions issue was addressed by removing the vulnerable code. Fixed in macOS Sequoia 15.7.4 and macOS Tahoe 26.3. An app may be able to access protected user data.

A path handling issue was addressed with improved logic. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to access user-sensitive data.

A logic issue was addressed with improved validation. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.2. An app may be able to access sensitive user data.

This issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.1. An app may be able to access sensitive user data.

A logic issue related to file handling was identified in macOS, which could allow an app to gain root privileges. This issue has been fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5.

This issue was addressed by removing the vulnerable code. An app may be able to modify protected parts of the file system.

The issue concerns improper validation of symlinks, which may allow an app to bypass user privacy preferences. It has been fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5.

A permissions issue was addressed with additional restrictions. An app may be able to modify protected parts of the file system.

This issue was addressed with improved data protection. An app may be able to modify protected parts of the file system.

The idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.

The idle locking function in MacOS 9 allows local users to bypass password protection of locked sessions. A user can select the 'Log Out' option and then 'Cancel' in the dialog box, which returns them to the locked session.