macOS vulnerabilities

A vulnerability in macOS Golden Gate 27 stemmed from excessive entitlements granted to apps, allowing access to user-sensitive data. The issue was fixed by removing additional entitlements.

A permissions issue in macOS Golden Gate 27 allowed an app to access information about a user's contacts. It was fixed with additional sandbox restrictions.

An authorization issue in macOS Golden Gate 27 allowed an app to access sensitive user data. The issue was fixed with improved state management.

A path handling issue in macOS Golden Gate 27 allowed an app to access protected user data. It was fixed with improved validation.

A race condition in macOS was addressed with improved locking. An app may be able to cause unexpected system termination.

An information disclosure issue in macOS was addressed with improved state management. An app may be able to access sensitive network connection information.

An authorization issue in macOS was addressed with improved entitlement checks. An app with admin privileges may be able to modify the System Keychain.

An integer underflow in macOS was addressed with improved input validation. An attacker with control of a network file server may be able to cause unexpected system termination.

A logic issue in macOS was addressed with improved checks. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.

A memory corruption issue in macOS was addressed with improved input validation. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.

A buffer overflow in macOS was addressed with improved size validation. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

The issue was addressed with improved handling of secure input state. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to access sensitive user data.

A race condition in macOS was addressed with additional validation. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences.

An access issue in macOS was addressed with improved access controls. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to access sensitive user data.

A vulnerability in macOS Golden Gate 27 related to app bundle integrity checks. A maliciously modified app may not be prevented from launching.

A vulnerability in macOS Sequoia 15.8 and macOS Tahoe 26.7 due to improper checks. An app may be able to elevate privileges.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.8 and visionOS 27. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

This issue was addressed with improved state management. The flaw affects macOS Golden Gate 27 and allows a malicious app to bypass clickjacking protections for secure prompts.

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files.

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks.

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.

A logic issue was addressed with improved checks. The issue affects macOS Golden Gate 27. An app may be able to break out of its sandbox.

A certificate validation issue was found in macOS and fixed with improved certificate validation. An attacker in a privileged network position may be able to intercept network traffic.

This issue was addressed with additional entitlement checks. Fixed in macOS Golden Gate 27. An app may be able to gain root privileges.

A buffer overflow vulnerability in macOS, fixed with improved bounds checking. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An issue in macOS addressed with improved checks. An app may be able to break out of its sandbox.

A logic issue in macOS addressed with improved checks. An app may be able to break out of its sandbox.

An access issue in macOS addressed with additional sandbox restrictions. An app may be able to bypass sandbox restrictions.

An issue in macOS addressed with improved checks. An app may be able to access sensitive user data.

A permissions issue in macOS addressed with improved state management. An app may be able to bypass Privacy preferences.

An issue in macOS addressed with improved checks. An app may be able to access sensitive user data.

An out-of-bounds read in macOS addressed with improved bounds checking. An app may be able to cause unexpected system termination or read kernel memory.

A logic issue in macOS allows an app to bypass Gatekeeper checks. Apple addressed the flaw with improved checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An access issue with system pasteboards in macOS allows an app to access sensitive user data. The flaw was fixed with additional sandbox restrictions in macOS Golden Gate 27.

A path traversal issue was addressed with improved path validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network directory server may be able to execute arbitrary code with root privileges.

A memory handling issue in macOS allows an app to cause unexpected system termination. The flaw was addressed with improved memory handling in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An out-of-bounds read in macOS causes unexpected app termination when processing a maliciously crafted disk image. The flaw was addressed with improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

A logic issue in macOS allows an app to cause unexpected system termination. The flaw was addressed with improved checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

A race condition in macOS allows an app to access protected user data. The flaw was addressed with additional validation in macOS Tahoe 26.6.

A permissions issue was addressed with improved validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A malicious application may be able to access restricted files.

A double free issue was addressed with improved memory management. Fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.

An authorization issue was addressed with improved access control. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access sensitive user data.

An authorization issue was addressed with improved access control. Fixed in macOS Golden Gate 27 and macOS Sequoia 15.8. An app may be able to access sensitive user data.

An integer overflow was addressed with improved input validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An attacker in a privileged network position may be able to cause a denial-of-service.

A resource exhaustion issue was addressed with improved input validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.

A race condition was addressed with additional validation. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. Fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.