iOS, iPadOS, macOS, tvOS, visionOS, watchOS vulnerabilities

A use-after-free issue was addressed with improved memory management. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may cause unexpected system termination or corrupt kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.

A signature validation issue in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed with improved checks. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.

A race condition was addressed with improved state handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and an app may be able to cause unexpected system termination.

A race condition was addressed with improved locking. An app may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

A use-after-free issue was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.

This issue was addressed with additional entitlement checks. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27 and 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.

A use after free issue was addressed with improved memory management. This issue is fixed in several versions of Apple operating systems.

The issue involves the potential disclosure of kernel memory by an app, which could lead to serious security breaches. It has been addressed with improved memory handling in various versions of Apple operating systems.

This issue was addressed with improved checks to prevent unauthorized actions. An app may be able to cause a denial-of-service.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in several versions of Apple operating systems.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in several versions of Apple operating systems.

This issue was addressed with improved validation of symlinks. The vulnerability is fixed in iOS 26.1, iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1. An app may be able to access protected user data.