CVE Vulnerability Catalog

A race condition in macOS was addressed with additional validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.

An out-of-bounds read was addressed with improved bounds checking. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, and visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.

A buffer overflow was addressed with improved memory handling. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, and visionOS 27.2. Processing a maliciously crafted image may corrupt process memory.

A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to gain root privileges.

An out-of-bounds write was addressed with improved bounds checking. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2. Processing a 3D model may lead to unexpected app termination.

The issue was addressed with improved memory handling. It affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, and visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.

This issue was addressed with improved file handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may be able to execute arbitrary code with system privileges.

A path handling issue was addressed with improved validation. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.

An out-of-bounds write was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An attacker on the local network may be able to corrupt process memory.

An out-of-bounds read was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. An attacker on the local network may be able to cause unexpected process termination or disclose process memory.

A permissions issue in macOS was addressed with additional restrictions. A user with screen sharing access may be able to view another user's screen.

An out-of-bounds read was addressed with improved bounds checking. A malicious USB device may be able to cause unexpected system termination or read kernel memory.

An out-of-bounds read issue was addressed by removing the vulnerable code. An app may be able to cause unexpected system termination or read kernel memory.

A race condition was addressed with improved locking. An app may be able to cause unexpected system termination or corrupt kernel memory.

An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

A use-after-free issue was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.

An authorization issue was addressed with improved state management. An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac.

A buffer overflow was addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected process termination. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.

An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.