CVE Vulnerability Catalog

A permissions issue in macOS was addressed with improved checks. A malicious app may be able to create files in protected directories. This affects Golden Gate, Sequoia and Tahoe versions.

A memory handling issue in macOS Golden Gate was addressed with improved memory handling. A remote attacker may be able to cause a denial-of-service. This affects only macOS Golden Gate 27.2.

An out-of-bounds read in Apple systems was addressed with improved bounds checking. An app may be able to cause a denial-of-service. The issue affects iOS, iPadOS, macOS and visionOS.

A file quarantine bypass in macOS was addressed with additional checks. An app may bypass Gatekeeper checks. This affects Golden Gate, Sequoia and Tahoe versions.

A permissions issue in macOS was addressed with additional restrictions. An attacker with root privileges may be able to access protected user data. This affects Golden Gate and Tahoe versions.

A logic issue in macOS was addressed with improved state management. An app may bypass Gatekeeper checks. This affects Golden Gate, Sequoia and Tahoe versions.

A logic issue in macOS was addressed with improved checks. An app may be able to gain root privileges. This affects Golden Gate, Sequoia and Tahoe versions.

A privacy issue in macOS was addressed with improved memory management. An app may be able to access sensitive user data. This affects Golden Gate, Sequoia and Tahoe versions.

An out-of-bounds write issue in macOS was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.

An authorization issue in Apple systems was addressed with improved state management. The flaw affects iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2 and visionOS 27.2. An app may be able to access sensitive user data.

An information disclosure issue in Apple systems was addressed with improved privacy controls. The flaw affects macOS Golden Gate 27, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

An authorization issue in Apple systems was addressed with improved state management. The flaw affects iOS/iPadOS 26.7.2, iOS/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2 and visionOS 27. An app may be able to access sensitive user data.

A use-after-free issue was addressed with improved memory management. The flaw affected iOS, iPadOS, and macOS and could allow an app to execute arbitrary code with kernel privileges. It was fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.2.

A permissions issue in Apple systems was addressed with additional restrictions. The flaw affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.

An issue in Apple systems was addressed with additional entitlement checks. The flaw affects iOS/iPadOS 26.7.2 and iOS/iPadOS 27. An app may be able to access sensitive user data.

A path traversal issue in macOS was addressed with improved path validation. The flaw affects macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges.

A race condition in Apple systems was addressed with additional validation. The flaw affects iOS/iPadOS 27, macOS Golden Gate 27 and visionOS 27. An app may be able to cause unexpected system termination or write kernel memory.

A path traversal issue in macOS was addressed with improved path validation. The flaw affects macOS Golden Gate 27. An app may be able to break out of its sandbox.

A buffer overflow in Apple systems was addressed with improved bounds checking. The flaw affects iOS/iPadOS 26.7.2, iOS/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2 and visionOS 27. Processing a maliciously crafted image may lead to heap corruption.

A logic issue in Apple systems was addressed with improved checks. The flaw affects iOS/iPadOS 26.7.2 and iOS/iPadOS 27. An attacker with physical access may be able to access contacts from the lock screen.