CVE Vulnerability Catalog

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may result in disclosure of process memory.

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted image may result in disclosure of process memory.

An authorization issue was addressed with improved state management. The flaw affects iOS, iPadOS, macOS, visionOS and watchOS and may allow an app to access sensitive user data.

A permissions issue was addressed with additional sandbox restrictions. The flaw affects macOS and may allow an app to access sensitive user data.

The issue was addressed with improved checks. It affects macOS and may allow a malicious application to bypass Privacy preferences.

A race condition was addressed with additional validation. An attacker may tamper with code-signed applications to execute arbitrary code in the application's context. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

A validation issue was addressed with improved input sanitization. The flaw affects macOS and may allow a malicious app to break out of its sandbox.

An out-of-bounds read was addressed with improved bounds checking. The flaw affects iOS, iPadOS and macOS and may allow an app to cause unexpected system termination or read kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking. The flaw affects macOS and processing a maliciously crafted file may lead to unexpected app termination.

An out-of-bounds write issue was addressed with improved bounds checking. An attacker with control of a network file server may be able to cause unexpected system termination.

An authorization issue was addressed with improved state management. An app may be able to read sensitive location information.

A type confusion issue was addressed with improved memory handling. An app may be able to cause a denial-of-service.

A use after free issue was addressed with improved memory management. An app may be able to gain root privileges.

A type confusion issue was addressed with improved checks. An app may be able to access sensitive user data.

An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.

A parsing issue in the handling of directory paths was addressed with improved path validation. An app may be able to gain root privileges.

An out-of-bounds write issue was addressed with improved bounds checking. Mounting a malicious disk image may cause unexpected system termination. The issue is fixed in macOS Golden Gate 27.2.

A race condition was addressed with additional validation. A malicious app may be able to break out of its sandbox.

A permissions issue was addressed with additional restrictions. A malicious app may be able to intercept network traffic.

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.