macOS vulnerabilities

An integer overflow was addressed with improved input validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read.

A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.

An out-of-bounds write issue was addressed with improved bounds checking. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

A vulnerability in macOS Golden Gate 27 allows an app to bypass Gatekeeper checks. The issue was addressed with improved checks.

A parsing issue in directory path handling in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. An app may access sensitive user data.

An issue in snapshot handling in macOS Golden Gate 27. An app may access protected user data.

An authorization issue in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. An app may access sensitive user data.

An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. An app may cause unexpected system termination.

An authentication issue in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.6. An app may cause unexpected system termination.

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious WebDAV server may result in code execution.

An out-of-bounds read was addressed with improved bounds checking. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination.

This issue was addressed with improved checks. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

This issue was addressed with improved checks. It is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access sensitive user data.

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges.

A vulnerability in macOS was addressed with improved checks. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.

A permissions issue in macOS was addressed with additional restrictions. The issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

A vulnerability in macOS was addressed with additional entitlement checks. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.

A race condition in macOS was addressed with improved locking. The issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

A validation issue in macOS was addressed with improved input sanitization. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.

A path handling issue in macOS was addressed with improved validation. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.

A race condition was addressed with improved locking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A local user may be able to read kernel memory.

An out-of-bounds read was addressed with improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.

An out-of-bounds write issue in macOS was addressed by removing the vulnerable code. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination.

The issue was addressed through improved state management. The issue affects macOS Golden Gate 27. An app may be able to access sensitive user data.

A buffer overflow was addressed with improved bounds checking. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.

A use-after-free issue was addressed with improved memory management. The issue affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

A logic issue in macOS allows an application to bypass Gatekeeper checks. The flaw was addressed with improved checks and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.6/26.7.

A correctness issue in macOS Sonoma allows an attacker with physical access to silently persist an Apple Account on an erased device. The issue is fixed in macOS Sonoma 14.8.8.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, and macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination.

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.

A lock screen issue in macOS fixed with additional restrictions. A person with physical access to a locked device may access contacts and photos.

An authorization issue in macOS. State management was improved. A malicious app may be able to break out of its sandbox.

A denial of service issue in macOS Tahoe. Fixed by removing vulnerable code. A local attacker may cause a denial of service.

An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6. An app may access sensitive user data.

An out-of-bounds read was fixed with improved bounds checking. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may access sensitive user data.

A path traversal issue was fixed with improved input validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may break out of its sandbox.

A stack overflow was fixed with improved input validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause a denial-of-service.

A race condition was fixed with additional validation. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, and tvOS 26.6. An app may access sensitive user data.

The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.

The issue was fixed with improved memory handling. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may cause unexpected system termination.

An authorization issue was fixed with improved state management. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An attacker with physical access to a locked device may view sensitive user information.

Improved handling of symlinks in macOS. An app may be able to modify protected parts of the file system.

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

A logic issue was addressed with improved validation. An app may access user-sensitive data.

A race condition was addressed with improved state management in macOS. The issue is fixed in macOS Sonoma 14.8.8 and macOS Tahoe 26.6.

A parsing issue in directory path handling was fixed with improved validation in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

An out-of-bounds read when parsing a maliciously crafted file may lead to unexpected app termination. This is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Vulnerability in macOS Tahoe allowing an attacker to modify the state of the Keychain. Fixed through improved state management.

An injection issue was fixed with improved validation. The vulnerability affects Apple systems and was resolved in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.