CVE Vulnerability Catalog

An authorization issue was addressed with improved state management. The vulnerability affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.

A state management issue in the web content processing component. Processing maliciously crafted web content may lead to an unexpected process crash.

An out-of-bounds write issue in the font processing component, addressed with improved bounds checking. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.

An input validation issue addressed with improved input validation. A remote attacker may be able to cause unexpected app termination.

An entitlement issue addressed with additional entitlement checks. An app may be able to fingerprint the user.

An out-of-bounds read in the web content processing component, addressed with improved bounds checking. Processing maliciously crafted web content may result in the disclosure of process memory.

A use-after-free issue addressed with improved memory management. An app may be able to cause unexpected system termination or corrupt kernel memory.

A permissions issue addressed with additional restrictions. An app may be able to access sensitive user data.

An authorization issue addressed with improved access control. An application may be able to execute arbitrary code with system privileges.

An entitlement issue addressed with additional entitlement checks. An app may be able to access a user's Photos Library.

An entitlement issue addressed with additional entitlement checks. An app may be able to access sensitive user data.

A type confusion issue in web content processing, addressed with improved state handling. The flaw affects Safari, iOS, iPadOS, macOS and visionOS. Processing maliciously crafted web content may lead to an unexpected process termination.

A flaw in the macOS Gatekeeper mechanism, addressed with improved checks. A maliciously crafted ZIP archive may bypass Gatekeeper checks. The issue affects macOS Golden Gate, Sequoia and Tahoe.

A resource exhaustion issue, addressed with improved input validation. It affects iOS, iPadOS, macOS and visionOS. A remote attacker may be able to cause a denial-of-service.

An out-of-bounds write issue in macOS, addressed with improved input validation. Processing a maliciously crafted file may lead to heap corruption. The issue affects macOS Golden Gate, Sequoia and Tahoe.

A race condition issue, addressed with improved state handling. It affects Safari, iOS, iPadOS, macOS, tvOS and watchOS. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A logic issue in macOS, addressed with improved checks. An app may be able to gain root privileges. The issue affects macOS Golden Gate, Sequoia and Tahoe.

A use-after-free issue, addressed with improved memory management. It affects Safari, iOS, iPadOS, macOS, tvOS and watchOS. Processing maliciously crafted web content may lead to an unexpected process termination.

An information disclosure issue, addressed with improved state management. It affects iOS, iPadOS, macOS, tvOS, visionOS and watchOS. An app may be able to determine kernel memory layout.

An authorization issue, addressed with improved state management. It affects iOS, iPadOS, macOS and visionOS. An app may be able to bypass certain Privacy preferences.