CVE Vulnerability Catalog

A type confusion issue was addressed with improved memory handling. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.

An issue addressed with improved input validation. It affects iOS, iPadOS and macOS. An app may be able to access sensitive user data.

An out-of-bounds read in font processing was addressed with improved bounds checking. Processing a maliciously crafted font may result in the disclosure of process memory.

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.

A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.

A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.

A logic issue was addressed with improved state management. A malicious app may be able to bypass certificate validation.

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.

An access issue was addressed with additional sandbox restrictions. An app may be able to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2 and visionOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory.

An out-of-bounds read in font processing was addressed with improved bounds checking. Processing a maliciously crafted font may result in the disclosure of process memory.

A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to memory corruption.

A use-after-free issue in web content processing was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

A heap buffer overflow was addressed with improved bounds checking. An attacker in radio range may be able to cause unexpected system termination.

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.

An out-of-bounds read was addressed with improved bounds checking. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2 and visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination.

An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An uninitialized memory issue was addressed with improved memory handling. Processing a maliciously crafted image may result in disclosure of process memory.

An uninitialized memory issue was addressed with improved memory handling. Processing a maliciously crafted image may result in disclosure of process memory.

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2.