CVE Vulnerability Catalog

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in multiple Apple systems (iOS, iPadOS, macOS, visionOS, watchOS). A sandboxed process may be able to circumvent sandbox restrictions.

A heap buffer overflow was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. Processing a maliciously crafted file may lead to unexpected app termination.

An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, and macOS. Processing a maliciously crafted image may lead to unexpected app termination.

An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to access sensitive user data.

A logic issue was addressed with improved state management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to an unexpected process termination.

The issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted 3D model may lead to memory corruption.

This issue was addressed with additional entitlement checks. Fixed in macOS Golden Gate 27. An app may be able to gain root privileges.

A race condition was addressed with improved state handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination.

This issue was addressed with additional entitlement checks. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to fingerprint the user.

An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. A sandboxed app may be able to access the System Keychain.

An information disclosure issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to identify what other apps a user has installed.

A permissions issue was addressed with additional sandbox restrictions. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to fingerprint the user.

A permissions issue was addressed with improved path validation. This affects iOS, iPadOS, macOS, and visionOS. A sandboxed app may be able to access restricted files.

An authorization issue was addressed with improved state management. This affects iOS and iPadOS. An app may be able to fingerprint the device.

A memory initialization issue was addressed with improved memory handling. This affects multiple Apple systems. An app with root privileges may be able to read uninitialized kernel memory.

An authorization issue was addressed with improved access control. This affects iOS, iPadOS, and macOS. An app may be able to access sensitive user data.

An integer overflow was addressed with improved input validation. This affects multiple Apple systems. Processing a maliciously crafted 3D model may lead to memory corruption.

An out-of-bounds write issue was addressed with improved bounds checking. This affects macOS. An app may be able to cause unexpected system termination or write kernel memory.

A permissions issue was addressed with improved validation. This affects macOS. An app may be able to access sensitive user data.

An authorization issue was addressed with improved state management. This affects iOS, iPadOS, macOS, and tvOS. An app may be able to access sensitive user data.