macOS vulnerabilities

This issue was addressed with additional entitlement checks. The vulnerability is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access user-sensitive data.

A logic issue was addressed with improved checks. The vulnerability is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, and macOS Tahoe 26.1. An app may be able to access user-sensitive data.

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7 and macOS Tahoe 26. An app may be able to bypass Privacy preferences.

A logic issue in macOS was addressed with improved restrictions. The issue affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. An app may be able to access sensitive user data.

In macOS (Sequoia 15.7, Sonoma 14.8, Tahoe 26) a vulnerability was fixed that could allow an app to access protected user data. The fix blocks unsigned services from launching on Intel Macs.

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Tahoe 26. An app with root privileges may be able to access private information.

A type confusion issue exists in macOS Tahoe 26, which was addressed with improved memory handling. An app may be able to cause a denial-of-service.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious app may be able to gain root privileges.

An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination.

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2. An app may be able to record the screen without an indicator.

A logic issue related to file handling was identified in macOS, which could allow an app to gain root privileges. This issue has been fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5.

This issue was addressed by removing the vulnerable code. An app may be able to modify protected parts of the file system.

The issue concerns improper validation of symlinks, which may allow an app to bypass user privacy preferences. It has been fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, and macOS Ventura 13.5.

A permissions issue was addressed with additional restrictions. An app may be able to modify protected parts of the file system.

This issue was addressed with improved data protection. An app may be able to modify protected parts of the file system.

The idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the programmer's switch or CMD-PWR keyboard sequence, which brings up a debugger that the attacker can use to disable the lock.

The idle locking function in MacOS 9 allows local users to bypass password protection of locked sessions. A user can select the 'Log Out' option and then 'Cancel' in the dialog box, which returns them to the locked session.