macOS vulnerabilities

A race condition was fixed with improved state handling in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Buffer overflow vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a local user to read kernel memory. Fixed with improved bounds checking.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A race condition was addressed with improved state handling. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to elevate privileges.

A file quarantine bypass was addressed with additional checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.

The issue was addressed with improved checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.

An information disclosure issue was addressed with improved privacy controls. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.3. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. An app may be able to cause unexpected system termination.

A person with access to a Mac may bypass the Login Window. The issue is fixed in macOS Monterey 12.4 with improved state handling.

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.

A logic issue was addressed with improved restrictions in macOS Tahoe 26. This issue allowed an app to access sensitive user data.

A race condition was addressed with additional validation in macOS Sequoia 15.7 and macOS Tahoe 26. An app may be able to gain root privileges.

macOS Tahoe 26 addresses an out-of-bounds read issue with improved bounds checking. An app may cause unexpected system termination.

In macOS Tahoe 26, vulnerable code was removed to address a permissions issue that could allow an app to access sensitive user data.

A logic issue in macOS allows a malicious app to gain root privileges. The flaw is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.

A permissions issue in macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. An app may be able to modify protected parts of the file system.

macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26 fix a logic issue that could allow a malicious app to access sensitive user data.

Improved checks in macOS prevent an attacker with physical access to a locked device from viewing sensitive user information.

Improved file handling in macOS prevents a maliciously crafted ZIP archive from bypassing Gatekeeper checks.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.4. An app may be able to access sensitive user data.

macOS Sequoia 15.6 fixes a memory handling issue when processing maliciously crafted images. This vulnerability could corrupt process memory.

Improved symlink handling in macOS Sequoia 15.6 prevents an app from breaking out of its sandbox.

In macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, an integer overflow was fixed with improved input validation. An app may be able to cause unexpected system termination.

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.

A vulnerability in macOS Sequoia 15.6 allows process memory corruption when processing a maliciously crafted image. The issue was addressed with improved memory handling.

The issue was addressed with improved checks in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system.

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on a locked device.

In macOS Sequoia 15.1, a permissions issue was fixed that allowed an app to execute arbitrary code out of its sandbox or with elevated privileges.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious application with root privileges may be able to access private information.

A permissions issue in macOS Sequoia allowed apps to access Contacts without user consent. This is fixed in macOS Sequoia 15.1.

A race condition was fixed in macOS Sequoia 15.1 that allowed an app to break out of its sandbox. The vulnerability exists in an unspecified system component.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3. An app may be able to access protected user data.

A permissions issue was addressed by removing the vulnerable code. Fixed in macOS Sequoia 15.7.4 and macOS Tahoe 26.3. An app may be able to access protected user data.

A path handling issue was addressed with improved logic. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to access user-sensitive data.

A logic issue was addressed with improved validation. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.2. An app may be able to access sensitive user data.

This issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.1. An app may be able to access sensitive user data.

A logic issue related to file handling was identified in macOS, which could allow an app to gain root privileges. This issue has been fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5.

This issue was addressed by removing the vulnerable code. An app may be able to modify protected parts of the file system.

The issue concerns improper validation of symlinks, which may allow an app to bypass user privacy preferences. It has been fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5.

A permissions issue was addressed with additional restrictions. An app may be able to modify protected parts of the file system.

This issue was addressed with improved data protection. An app may be able to modify protected parts of the file system.

The idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.

The idle locking function in MacOS 9 allows local users to bypass password protection of locked sessions. A user can select the 'Log Out' option and then 'Cancel' in the dialog box, which returns them to the locked session.