CVE Vulnerability Catalog

A logic issue was addressed with improved state management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to an unexpected process termination.

The issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing a maliciously crafted 3D model may lead to memory corruption.

This issue was addressed with additional entitlement checks. Fixed in macOS Golden Gate 27. An app may be able to gain root privileges.

A race condition was addressed with improved state handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination.

This issue was addressed with additional entitlement checks. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to fingerprint the user.

An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. A sandboxed app may be able to access the System Keychain.

An information disclosure issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to identify what other apps a user has installed.

A permissions issue was addressed with additional sandbox restrictions. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to fingerprint the user.

A permissions issue was addressed with improved path validation. This affects iOS, iPadOS, macOS, and visionOS. A sandboxed app may be able to access restricted files.

An authorization issue was addressed with improved state management. This affects iOS and iPadOS. An app may be able to fingerprint the device.

A memory initialization issue was addressed with improved memory handling. This affects multiple Apple systems. An app with root privileges may be able to read uninitialized kernel memory.

An authorization issue was addressed with improved access control. This affects iOS, iPadOS, and macOS. An app may be able to access sensitive user data.

An integer overflow was addressed with improved input validation. This affects multiple Apple systems. Processing a maliciously crafted 3D model may lead to memory corruption.

An out-of-bounds write issue was addressed with improved bounds checking. This affects macOS. An app may be able to cause unexpected system termination or write kernel memory.

A permissions issue was addressed with improved validation. This affects macOS. An app may be able to access sensitive user data.

An authorization issue was addressed with improved state management. This affects iOS, iPadOS, macOS, and tvOS. An app may be able to access sensitive user data.

A type confusion issue was addressed with improved memory handling. This affects multiple Apple systems. An app may be able to cause unexpected system termination.

An authorization issue was addressed with improved state management. This affects iOS, iPadOS, tvOS, and visionOS. An app may be able to access sensitive user data.

An authorization issue in Apple systems was addressed with improved access control. The flaw allowed an app to read persistent device identifiers. The fix is available in iOS 26.7/27, iPadOS 26.7/27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing a maliciously crafted 3D model may lead to memory corruption. The fix covers iOS 26.7/27, iPadOS 26.7/27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.