CVE Vulnerability Catalog

A use-after-free issue was addressed with improved memory management in Apple systems. An app may be able to cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. An attacker may be able to cause unexpected system termination or read kernel memory.

A use-after-free issue was addressed with improved memory management in Apple systems. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

A symlink validation issue was addressed with improved validation in macOS. An app may be able to break out of its sandbox.

A path handling issue was addressed with improved validation in macOS. An app may be able to bypass Gatekeeper checks.

A path handling issue was addressed with improved logic in macOS. A malicious Screen Sharing peer may be able to create arbitrary symlinks as root.

An out-of-bounds write issue was addressed with improved bounds checking in macOS. A remote attacker may be able to cause a denial-of-service.

An out-of-bounds read was addressed with improved bounds checking in macOS. An app may be able to cause unexpected system termination or read kernel memory.

An out-of-bounds write issue was addressed with improved bounds checking in iOS and iPadOS. An app may be able to cause unexpected system termination or write kernel memory.

A permissions issue in macOS was addressed with improved validation. The issue is fixed in macOS Golden Gate 27.2 and could allow an app to access sensitive user data.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and a malicious Screen Sharing peer may be able to corrupt process memory.

A parsing issue in directory path handling was addressed with improved path validation. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to modify protected parts of the file system.

A buffer overflow was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to cause a denial-of-service.

A race condition was addressed with improved state handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and an app may be able to cause unexpected system termination.

A logic issue was addressed with improved restrictions. The issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2, and the user's original email address may be leaked when using the Hide My Email feature.

An access issue was addressed with additional sandbox restrictions. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to break out of its sandbox.

This issue was addressed with improved permissions checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to break out of its sandbox.

An out-of-bounds read was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2, and an app may be able to cause unexpected system termination or read kernel memory.

A file quarantine bypass was addressed with additional checks. The issue is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2, and an app may bypass Gatekeeper checks.

A downgrade issue in macOS was addressed with additional version checks. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.