macOS vulnerabilities

A use-after-free issue in macOS was addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.

A symlink handling issue in macOS was addressed with improved handling. An app may be able to access user-sensitive data.

A buffer overflow in macOS was addressed with improved bounds checking. A sandboxed process may be able to circumvent sandbox restrictions.

An integer overflow in macOS was addressed with improved input validation. Connecting to a malicious VNC server may cause a denial-of-service.

A symlink validation issue was addressed with improved validation in macOS. An app may be able to break out of its sandbox.

A path handling issue was addressed with improved validation in macOS. An app may be able to bypass Gatekeeper checks.

A path handling issue was addressed with improved logic in macOS. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.

An out-of-bounds write issue was addressed with improved bounds checking in macOS. A remote attacker may be able to cause a denial-of-service.

An out-of-bounds read was addressed with improved bounds checking in macOS. An app may be able to cause unexpected system termination or read kernel memory.

A permissions issue in macOS was addressed with improved validation. The issue is fixed in macOS Golden Gate 27.2 and could allow an app to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and a malicious Screen Sharing peer may be able to corrupt process memory.

A parsing issue in directory path handling was addressed with improved path validation. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to modify protected parts of the file system.

A buffer overflow was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to cause a denial-of-service.

An access issue was addressed with additional sandbox restrictions. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to break out of its sandbox.

This issue was addressed with improved permissions checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to break out of its sandbox.

An out-of-bounds read was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to cause unexpected system termination or read kernel memory.

A file quarantine bypass was addressed with additional checks. The issue is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2, and an app may bypass Gatekeeper checks.

A downgrade issue in macOS was addressed with additional version checks. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.

A race condition in macOS was addressed with additional validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.

A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.

This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges.

A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

An out-of-bounds write was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An attacker on the local network may be able to corrupt process memory.

An out-of-bounds read was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected process termination or disclose process memory.

A permissions issue in macOS was addressed with additional restrictions. A user with screen sharing access may be able to view another user's screen.

An out-of-bounds read issue was addressed by removing the vulnerable code. An app may be able to cause unexpected system termination or read kernel memory.

An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An authorization issue was addressed with improved state management. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.

A buffer overflow was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected process termination. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

The issue was addressed with improved checks. It affects macOS Golden Gate 27.2 and macOS Tahoe 26.7.2. An app may be able to bypass network restrictions.

A permissions issue was addressed with additional restrictions. It affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2. A malicious application may be able to bypass Privacy preferences.

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.

A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

An out-of-bounds read was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. A remote attacker may be able to cause a denial-of-service or disclose process memory.

An authorization issue was addressed with improved state management. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to bypass Privacy preferences.

This issue was addressed with improved checks. The issue affects macOS Golden Gate 27.2 and macOS Tahoe 26.7.2. An app may be able to bypass Gatekeeper checks.

The issue was addressed with improved memory handling. The issue affects macOS Golden Gate 27.2 and macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.

A race condition was addressed with additional validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

This issue was addressed by removing the vulnerable code. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

A logic issue was addressed with improved checks. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.

A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges.

An authentication issue was addressed with improved validation of user attributes. An app may be able to gain root privileges.

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may disclose process memory.

A logic issue was addressed with improved checks. An app may bypass Gatekeeper checks.

An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may cause unexpected system termination or read kernel memory.

A race condition was addressed with improved handling of symbolic links. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

A double free issue was addressed with improved memory management. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. A remote attacker may cause unexpected process termination.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Sequoia 15.8 and macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

A privacy issue was addressed with improved checks. The issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

A vulnerability in macOS Golden Gate 27 allowed an app to disclose kernel memory. The issue was fixed by removing the vulnerable code.