CVE Vulnerability Catalog

An access issue was addressed with improved access restrictions in Apple platforms (iOS, iPadOS, macOS, visionOS). A malicious app may be able to access the camera without user permission.

An authorization issue was addressed with improved state management in iOS and iPadOS. An app may be able to fingerprint the user.

The issue was addressed with improved checks in Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, watchOS). Processing a maliciously crafted image may result in disclosure of process memory.

An authorization issue was addressed with improved entitlement checks in iOS and iPadOS. A remote attacker may be able to access sensitive user data.

A use-after-free issue was addressed with improved memory management in Safari and Apple platforms (iOS, iPadOS, macOS, visionOS). Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue was addressed with improved input validation in Safari and Apple platforms (iOS, iPadOS, macOS, tvOS). Processing maliciously crafted web content may lead to an unexpected process crash.

A file access issue with certain home folder files was addressed with improved access restrictions in macOS. An app may be able to access information about a user's contacts.

A security issue in Apple systems was addressed with improved checks. An app may be able to access sensitive user data. The issue is fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and tvOS 27.2.

A type confusion issue was addressed with improved checks. Processing maliciously crafted web content may lead to memory corruption. The issue affects Safari 27.2, iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.

An out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to an unexpected process crash. The issue affects Safari 27.2, iOS/iPadOS 26.7.2 and 27.2, and macOS Golden Gate 27.2.

A buffer overflow was addressed with improved size validation. Processing a maliciously crafted audio file may lead to memory corruption. The issue affects iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.

An out-of-bounds write issue was addressed with improved bounds checking in Apple systems. Processing a maliciously crafted image may lead to unexpected app termination.

An out-of-bounds read was addressed with improved input validation. Processing a maliciously crafted font may result in the disclosure of process memory. The issue affects iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.

An out-of-bounds write was addressed with improved input validation. An app may be able to cause unexpected system termination or corrupt kernel memory. The issue affects iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An access issue was addressed with improved access control. A malicious app may be able to access restricted system interfaces or launder launch attribution. The issue affects iOS/iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.

The issue was addressed with improved handling of symlinks. An app may be able to modify protected parts of the file system. The issue affects iOS/iPadOS 26.7.2 and 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.

A null pointer dereference was addressed with improved input validation. An app may be able to cause unexpected system termination. The issue affects iOS/iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, and watchOS 27.

The issue was addressed with improved memory handling. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An out-of-bounds read in Apple systems was addressed with improved bounds checking. The issue occurs when processing a maliciously crafted image. This may lead to unexpected app termination.

A use-after-free in macOS was addressed with improved memory management. The issue may be exploited by an app to cause unexpected system termination or corrupt kernel memory.