macOS vulnerabilities

An injection issue was fixed with improved validation. The vulnerability affects Apple systems and was resolved in macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.7. An app may be able to gain root privileges.

A race condition was fixed with improved state handling in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

Buffer overflow vulnerability in macOS (Sequoia, Sonoma, Tahoe) allowing a local user to read kernel memory. Fixed with improved bounds checking.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A permissions issue was fixed with additional restrictions in macOS. Affected versions include macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6.

A race condition was addressed with improved state handling. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to elevate privileges.

A file quarantine bypass was addressed with additional checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.

The issue was addressed with improved checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.5.

An information disclosure issue was addressed with improved privacy controls. Fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.3. An app may be able to access sensitive user data.

A permissions issue was addressed with additional restrictions. An app may be able to cause unexpected system termination.

A person with access to a Mac may bypass the Login Window. The issue is fixed in macOS Monterey 12.4 with improved state handling.

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.

A logic issue was addressed with improved restrictions in macOS Tahoe 26. This issue allowed an app to access sensitive user data.

A race condition was addressed with additional validation in macOS Sequoia 15.7 and macOS Tahoe 26. An app may be able to gain root privileges.

macOS Tahoe 26 addresses an out-of-bounds read issue with improved bounds checking. An app may cause unexpected system termination.

In macOS Tahoe 26, vulnerable code was removed to address a permissions issue that could allow an app to access sensitive user data.

A logic issue in macOS allows a malicious app to gain root privileges. The flaw is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26.

A permissions issue in macOS Sequoia 15.7, Sonoma 14.8, and Tahoe 26. An app may be able to modify protected parts of the file system.

macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26 fix a logic issue that could allow a malicious app to access sensitive user data.

The issue was addressed with improved memory handling. Exploitation of this vulnerability may lead to process memory corruption when processing a maliciously crafted image.

Improved checks in macOS prevent an attacker with physical access to a locked device from viewing sensitive user information.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.5. An app may be able to access protected user data.

A state management flaw in macOS allows an app to access private information. The issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.5.

A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.

Improved file handling in macOS prevents a maliciously crafted ZIP archive from bypassing Gatekeeper checks.

A permissions checking flaw in macOS Tahoe 26.4. A malicious app may be able to access arbitrary files.

A race condition was addressed with additional validation in macOS Tahoe 26.4. Before the fix, an app could access sensitive user data.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.4. An app may be able to access sensitive user data.

macOS Sequoia 15.6 fixes a memory handling issue when processing maliciously crafted images. This vulnerability could corrupt process memory.

Improved symlink handling in macOS Sequoia 15.6 prevents an app from breaking out of its sandbox.

In macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, an integer overflow was fixed with improved input validation. An app may be able to cause unexpected system termination.

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An attacker may be able to cause unexpected app termination.

A vulnerability in macOS Sequoia 15.6 allows process memory corruption when processing a maliciously crafted image. The issue was addressed with improved memory handling.

The issue was addressed with improved checks in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system.

This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.1. An attacker with physical access can input keyboard events to apps running on a locked device.

In macOS Sequoia 15.1, a permissions issue was fixed that allowed an app to execute arbitrary code out of its sandbox or with elevated privileges.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.1. A malicious application with root privileges may be able to access private information.

A permissions issue in macOS Sequoia allowed apps to access Contacts without user consent. This is fixed in macOS Sequoia 15.1.

A race condition was fixed in macOS Sequoia 15.1 that allowed an app to break out of its sandbox. The vulnerability exists in an unspecified system component.

An authorization issue was addressed with improved state management. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3. An app may be able to access sensitive user data.

A privacy issue was addressed by moving sensitive data to a protected location. Fixed in macOS Sequoia 15.8.2 and macOS Tahoe 26.3. A malicious app may be able to access notifications from other iCloud devices.

A permissions issue was addressed with additional restrictions. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.3. An app may be able to access protected user data.

A permissions issue was addressed by removing the vulnerable code. Fixed in macOS Sequoia 15.7.4 and macOS Tahoe 26.3. An app may be able to access protected user data.

A path handling issue was addressed with improved logic. This issue affects macOS (Sequoia, Sonoma, Tahoe) and may allow an app to access user-sensitive data.

A logic issue was addressed with improved validation. Fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, and macOS Tahoe 26.2. An app may be able to access sensitive user data.

A logic issue in file handling was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2. An app may be able to access protected user data.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3 and macOS Tahoe 26.2. An app may be able to access sensitive user data.

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. The issue is fixed in macOS Sequoia 15.7.3 and macOS Tahoe 26.2. An app may be able to access user-sensitive data.

A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.3 and macOS Tahoe 26.2. An app may be able to access sensitive user data.

A permissions issue in macOS was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, and macOS Tahoe 26.2. An app may be able to access sensitive user data.