CVE Vulnerability Catalog

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may result in disclosure of process memory.

An authorization issue was addressed with improved state management. The flaw affects iOS, iPadOS, macOS, visionOS and watchOS and may allow an app to access sensitive user data.

The issue was addressed with improved checks. It affects macOS and may allow a malicious application to bypass Privacy preferences.

A race condition was addressed with additional validation. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An authorization issue was addressed with improved state management. An app may be able to read sensitive location information.

A type confusion issue was addressed with improved memory handling. An app may be able to cause a denial-of-service.

A type confusion issue was addressed with improved checks. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. Mounting a malicious disk image may cause unexpected system termination. The issue is fixed in macOS Golden Gate 27.2.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to unexpected app termination.

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

A use-after-free issue was addressed with improved memory management in Apple systems. An app may be able to cause unexpected system termination.

A path handling issue was addressed with improved logic in macOS. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.

A permissions issue in macOS was addressed with improved validation. The issue is fixed in macOS Golden Gate 27.2 and could allow an app to access sensitive user data.

A race condition was addressed with improved state handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and an app may be able to cause unexpected system termination.

A logic issue was addressed with improved restrictions. The issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2, and the user's original email address may be leaked when using the Hide My Email feature.

A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

An out-of-bounds read was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected process termination or disclose process memory.

An out-of-bounds read was addressed with improved bounds checking. A malicious USB device may be able to cause unexpected system termination or read kernel memory.

An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

A buffer overflow was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected process termination. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.