CVE Vulnerability Catalog

A logic issue was addressed with improved checks. The issue affects iOS 26.7, iPadOS 26.7, iOS 27, and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information.

A certificate validation issue was found in macOS and fixed with improved certificate validation. An attacker in a privileged network position may be able to intercept network traffic.

A path traversal issue was found in Apple systems and fixed with improved input validation. An app may be able to modify protected system files.

An input validation issue was found in Apple systems and fixed with improved input validation. An attacker in radio range may be able to cause unexpected system termination.

A permissions issue was found in Apple systems and fixed with additional restrictions. An app may be able to access sensitive user data.

A privacy issue was found in Apple systems and fixed with improved handling of files. An app may be able to access sensitive user data.

An out-of-bounds write issue was found in Apple systems and fixed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected process termination.

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service.

A permissions issue was found in Apple systems and fixed with additional restrictions. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in multiple Apple systems (iOS, iPadOS, macOS, visionOS, watchOS). A sandboxed process may be able to circumvent sandbox restrictions.

A heap buffer overflow was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. Processing a maliciously crafted file may lead to unexpected app termination.

An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, and macOS. Processing a maliciously crafted image may lead to unexpected app termination.

An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, tvOS, visionOS, and watchOS. An app may be able to access sensitive user data.

A logic issue was addressed with improved state management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to an unexpected process termination.

A race condition was addressed with improved state handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. An app may be able to cause unexpected system termination.

An authorization issue was addressed with improved state management. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. A sandboxed app may be able to access the System Keychain.

A permissions issue was addressed with improved path validation. This affects iOS, iPadOS, macOS, and visionOS. A sandboxed app may be able to access restricted files.

A memory initialization issue was addressed with improved memory handling. This affects multiple Apple systems. An app with root privileges may be able to read uninitialized kernel memory.

An authorization issue was addressed with improved access control. This affects iOS, iPadOS, and macOS. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. This affects macOS. An app may be able to cause unexpected system termination or write kernel memory.