An out-of-bounds write vulnerability was addressed by improving bounds checking in several Apple operating systems. The flaw could allow an application to cause unexpected system termination. The issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
An out-of-bounds write vulnerability in macOS was fixed by improving bounds checking. Exploiting this flaw by mounting a maliciously crafted disk image could cause unexpected system termination or corrupt kernel memory. The issue is resolved in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.
An out-of-bounds write vulnerability in macOS was fixed by improving bounds checking. The flaw could allow a remote attacker to cause unexpected application termination or heap corruption. The issue is resolved in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A buffer overflow vulnerability was addressed by improving bounds checking in several Apple operating systems. The flaw could lead to heap corruption when processing a maliciously crafted image. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, and visionOS 27.
A logic issue affecting iOS and iPadOS was addressed by improved state management. The vulnerability could allow an app to access sensitive user data. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, and all versions of iOS 27 and iPadOS 27.
An out-of-bounds write vulnerability was fixed by improving bounds checking in Apple operating systems including iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2. This flaw could allow an application to cause unexpected system termination or write to kernel memory.
A logic flaw in iOS and iPadOS could allow an attacker with physical access to the device to access contacts from the lock screen. This issue has been addressed with improved checks and fixed in iOS 26.7.2, iPadOS 26.7.2, and later versions including iOS 27 and iPadOS 27.
CVE-2026-84599 is a vulnerability affecting multiple Apple operating systems where improper memory handling could allow an app to cause unexpected system termination or corrupt kernel memory. The issue has been addressed with improved memory handling in several Apple OS versions including iOS 26.7.2, iPadOS 26.7.2, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
CVE-2026-84542 is an access control vulnerability in macOS that could allow an application to read files outside its sandbox. The issue is addressed by improved access restrictions and fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A use-after-free vulnerability was addressed through improved memory management in multiple Apple operating systems. This flaw could allow an application to cause unexpected system termination or write to kernel memory. The issue is fixed in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
An out-of-bounds write vulnerability was fixed in macOS Golden Gate 27 and macOS Tahoe 26.7.2 by improving bounds checking. This flaw could allow an application to cause unexpected system termination.
An authorization vulnerability in iOS and iPadOS was addressed by improving state management. The flaw could allow an app to read the device's name without proper authorization. This issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.
A path traversal vulnerability in macOS Golden Gate 27 was addressed by improving path validation. This flaw could allow an application to escape its sandbox environment. The issue has been fixed in macOS Golden Gate 27.
An authorization vulnerability in macOS was addressed by improving state management. The flaw could have allowed an application to access sensitive user data. The issue is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7.2.
An authorization issue in Apple operating systems was addressed by improving state management. The flaw could allow an app to access sensitive user data. The issue is fixed in multiple versions of iOS, iPadOS, macOS, and visionOS.
CVE-2026-64789 is a vulnerability in macOS where a malicious application may bypass Gatekeeper checks due to insufficient validation of file attributes. The issue has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2 by improving the validation process.
An authentication issue in iOS and iPadOS was addressed by improving state management. The vulnerability could allow a malicious app to access Bluetooth functionality without user consent. This issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.
An out-of-bounds write vulnerability was identified and fixed in multiple Apple operating systems including iOS, iPadOS, visionOS, and watchOS. The flaw could cause memory corruption and unexpected application termination. The issue has been addressed by improved bounds checking and fixed in versions iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, visionOS 27.2, and watchOS 27.2.
An infinite loop vulnerability exists in Xpdf version 4.06 and earlier due to improper validation of the progression order field in JPEG 2000 images. This flaw can cause the application to hang when processing crafted images.
A use-after-free vulnerability was addressed by improving memory management in multiple Apple operating systems. The flaw could allow an app to cause unexpected system termination or corrupt kernel memory. The issue is fixed in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.