CVE Vulnerability Catalog

A file quarantine bypass in macOS allows a maliciously crafted ZIP archive to bypass Gatekeeper checks. The issue was addressed with additional checks and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An authorization issue in iOS and iPadOS allows an app to read the device's name. The issue was addressed with improved state management and is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.

A stack buffer overflow in macOS can be triggered by processing a maliciously crafted audit file, corrupting process memory. The issue was addressed through improved input validation and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

A memory handling issue in Apple systems allows an app to cause unexpected system termination or corrupt kernel memory. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

An out-of-bounds write issue in Apple systems allows an app to cause unexpected system termination. The issue was addressed with improved bounds checking and is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.

A logic issue in iOS and iPadOS allows an app to access sensitive user data. The issue was addressed with improved state management and is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27, and iPadOS 27.

An out-of-bounds write issue in macOS can be exploited by a remote attacker to cause unexpected app termination or heap corruption. The issue was addressed with improved bounds checking and is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

A use after free issue in macOS allows an app with App Sandbox restrictions to escape the sandbox and execute code with root privileges. The issue was addressed with improved memory management and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An access issue in macOS allows an app to read files outside of its sandbox. The issue was addressed with improved access restrictions and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An out-of-bounds write issue in macOS allows an app to cause unexpected system termination. The issue was addressed with improved bounds checking and is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7.2.

A logging issue in macOS was addressed with improved data redaction. An app may be able to access sensitive user data.

A memory handling issue in macOS was addressed with improved memory handling. An app may be able to disclose kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking in macOS Golden Gate and macOS Tahoe. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

A use-after-free issue in Apple systems was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.

An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.

An authentication issue in Apple systems was addressed with improved state management. A malicious app may be able to access Bluetooth without user consent.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further vulnerability details are available.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No further vulnerability details are available.

An authorization issue in Apple systems was addressed with improved state management. An app may be able to access sensitive user data.

A permissions issue in macOS was addressed with additional restrictions. An app with root privileges may be able to access private information.