CVE Vulnerability Catalog

The issue was addressed with improved memory handling. The flaw affects iOS 26.6, iPadOS 26.6, iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, and watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.

An authorization issue was addressed with improved entitlement checks. The flaw affects macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization.

An authorization issue was addressed with improved state management. The flaw affects iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to access sensitive user data.

A validation issue in macOS was addressed with improved input sanitization. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution.

A path handling issue in macOS was addressed with improved validation. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.

A race condition was addressed with improved locking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. A local user may be able to read kernel memory.

A permissions issue in Apple systems was addressed with additional restrictions. The issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27. A malicious app may be able to gain root privileges.

A memory corruption issue was addressed with improved input validation in iOS 27, iPadOS 27, and macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.

The issue was addressed with improved memory handling in multiple Apple systems. Connecting to a malicious NFS server may disclose kernel memory.

A use-after-free issue was addressed with improved memory management in Apple systems. Connecting to a malicious NFS server may lead to kernel memory corruption.

A use-after-free issue was addressed with improved memory management in iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds read was addressed with improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.

An out-of-bounds write issue in macOS was addressed by removing the vulnerable code. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination.

An authentication issue in iOS 27 and iPadOS 27 was addressed with improved state management. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication.

A data protection issue was addressed with improved data protection mechanisms. The vulnerability affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and watchOS 27. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

A denial-of-service issue in iOS and iPadOS was addressed with improved validation. The issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.

A privacy issue was addressed by moving sensitive data. The issue affects iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user.