Apple macOS vulnerabilities

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption.

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files.

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information.

An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination.

A logic issue was addressed with improved state management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. An app may be able to access protected user data.

A use-after-free issue was addressed with improved memory management. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Mounting a maliciously crafted SMB network share may lead to system termination.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.

An authorization issue was addressed with improved entitlement checks. The flaw affects macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization.

A privacy issue was addressed by removing sensitive data. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may be able to leak sensitive user information.

A file quarantine bypass was addressed with additional checks. The fix is included in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. An app may bypass Gatekeeper checks.

A memory initialization issue was fixed with improved memory handling. The vulnerability affects macOS systems. An app may disclose kernel memory.

Additional sandbox restrictions were introduced in macOS Tahoe. An app may be able to access sensitive user data.

Improved checks in macOS. An app may access sensitive user data.

Improved race condition handling in macOS. An app may access sensitive user data.

Improved input validation in macOS. A remote attacker may cause a denial of service.

A permissions issue addressed by removing the vulnerable code affects macOS Sequoia, macOS Sonoma, and macOS Tahoe. An app may be able to read files outside of its sandbox.

A malicious application may be able to bypass Privacy preferences. An authorization issue was addressed with improved state management.

A local attacker may be able to determine the legacy VNC password configured for Screen Sharing. This issue was addressed with additional entitlement checks.

Processing a maliciously crafted image may lead to arbitrary code execution. A buffer overflow was addressed with improved bounds checking.

An app may be able to bypass network restrictions. A permissions issue was addressed with additional sandbox restrictions.

An app may be able to cause a denial of service. A logic issue existed resulting in memory corruption, addressed with improved state management.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.7, macOS Tahoe 26.6. A user may be able to elevate privileges.

A privacy issue was addressed with improved handling of temporary files. This issue affects macOS. An app may be able to capture a user's screen.

A logic issue was addressed with improved validation. This issue affects macOS. An app may bypass Gatekeeper checks.

A logic issue was addressed with improved checks. This issue affects macOS. An app may be able to break out of its sandbox.

Apple addressed an out-of-bounds read with improved bounds checking in macOS Sequoia, Sonoma, and Ventura. The flaw allows an app to cause unexpected system termination.