CVE Vulnerability Catalog

An authorization issue, addressed with improved state management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access sensitive user data.

A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.

A memory handling issue, addressed with improved memory handling. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory.

An integer underflow in SMB connection handling, addressed with improved input validation. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination.

An authorization issue, addressed with improved state management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to break out of its sandbox.

A path handling issue, addressed with improved validation. The flaw affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, and visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files.

A cryptographic issue, addressed with improved integrity checks. The flaw affects iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27. An attacker in a privileged network position may be able to modify network traffic.

An out-of-bounds read issue in Apple systems was addressed with improved input validation. Opening a maliciously crafted file may cause unexpected process termination or disclose process memory.

An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing maliciously crafted NTLM input may lead to unexpected app termination.

An information disclosure issue in Apple systems was addressed with improved memory management. An app may be able to disclose kernel memory.

A logging issue in Apple systems was addressed with improved data redaction. An app may be able to access sensitive user data.

An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing a maliciously crafted 3D scene may lead to unexpected process termination.

A logging issue in Apple systems was addressed with improved data redaction. An app may be able to access user-sensitive data.

An out-of-bounds read vulnerability in Apple systems, fixed by improved bounds checking. Processing a maliciously crafted font file may lead to unexpected app termination.

An out-of-bounds write vulnerability in Apple systems, fixed by improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.

A race condition vulnerability in macOS Golden Gate, fixed by improved state management. An app may be able to access sensitive user data.

A use-after-free vulnerability in Apple systems, fixed by improved memory management. An app may be able to cause unexpected system termination.

A buffer overflow vulnerability in macOS Golden Gate, fixed by improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds write vulnerability in Apple systems, fixed by improved bounds checking. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed.