CVE Vulnerability Catalog

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.

An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.

A memory handling issue in macOS was addressed with improved memory management. The vulnerability affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

A race condition was addressed with additional validation. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS in specific versions. An app may be able to access sensitive user data.

An authorization issue was addressed with improved state management. The vulnerability affects iOS 26.7.2 and iPadOS 26.7.2, and iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

An input validation issue was addressed with improved input validation. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2 and visionOS 27.2. Processing web content may disclose sensitive information.

An out-of-bounds access issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, tvOS, and visionOS in specific versions. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

A memory initialization issue was addressed with improved memory handling. The vulnerability affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS in specific versions. An app may be able to disclose kernel memory.

A memory corruption issue was addressed with improved input validation. The vulnerability affects iOS, iPadOS, macOS, and visionOS in specific versions. An attacker in physical proximity may be able to corrupt process memory.

A privacy issue was addressed by removing sensitive data. The vulnerability affects iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

A buffer overflow issue was addressed with improved memory handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2 and watchOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory.

A null pointer dereference was addressed with improved validation. The vulnerability affects iOS 26.7.2 and iPadOS 26.7.2, and iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.

A use-after-free issue in Safari and Apple operating systems was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A use-after-free issue in Safari and Apple operating systems was addressed with improved memory management. Processing maliciously crafted web content may lead to unexpected memory modification.

A use-after-free issue in Safari and Apple operating systems was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A race condition in macOS was addressed with improved state handling. An app may be able to gain root privileges.

An issue in macOS was addressed with improved checks. An app may be able to cause unexpected system termination.

A logging issue in Apple operating systems was addressed with improved data redaction. A malicious application may be able to bypass Privacy preferences.

A Web Content sandbox vulnerability was addressed by removing the vulnerable code. The issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2. A remote attacker may be able to break out of the Web Content sandbox.