CVE Vulnerability Catalog

This issue was addressed with improved data access restriction. An app may be able to access sensitive user data.

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may result in disclosure of process memory.

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to arbitrary code execution.

An integer underflow was addressed with improved input validation. Processing a maliciously crafted image may result in memory corruption.

This issue was addressed with improved checks. An app may be able to bypass Privacy preferences.

A use-after-free issue was addressed with improved memory management. The vulnerability affects Safari, iOS, iPadOS, macOS, and visionOS. Processing maliciously crafted web content may lead to arbitrary code execution.

An out-of-bounds read was addressed with improved bounds checking. An attacker in radio range may be able to cause unexpected system termination.

An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted image may result in memory corruption.

A denial-of-service issue was addressed with improved input validation. An attacker in a privileged network position may be able to cause a denial-of-service.

An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted calendar invitation may lead to memory corruption.

An access issue was addressed with improved access restrictions. An app may be able to access sensitive user data.

An information disclosure issue in macOS was addressed with improved logic. The flaw affects macOS Golden Gate 27.2 and may allow an app to access sensitive user data.

An authorization issue was addressed with improved access control. The flaw affects iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2, allowing an app to access sensitive user data.

A use-after-free issue was addressed with improved memory management. The flaw affects Safari 27.2, iOS/iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and processing maliciously crafted web content may lead to unexpected process termination.

An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and macOS Tahoe 26.7.2.

A path handling issue was addressed with improved validation. The flaw affects iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2, allowing an attacker with physical access to a trust-paired device to read and write arbitrary files.

An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects iOS/iPadOS 26.7.2 and 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and processing a maliciously crafted PDF file may lead to memory corruption.

An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects iOS/iPadOS 26.7.2 and 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and processing a maliciously crafted PDF file may lead to memory corruption.

This issue was addressed with improved checks. The flaw affects iOS 27.2 and iPadOS 27.2, allowing an app to access sensitive user data.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27, and processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.