CVE-2026-113949 is a type confusion vulnerability in Safari and related Apple operating systems that was addressed by improved state management. The flaw could allow processing of maliciously crafted web content to cause memory corruption. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate was addressed by improved bounds checking. This flaw could allow an application to cause unexpected system termination or read kernel memory. The issue is fixed in macOS Golden Gate version 27.2.
CVE-2026-113944 is an out-of-bounds read vulnerability in macOS Golden Gate that could allow an application to cause unexpected system termination or read kernel memory. The issue has been fixed in macOS Golden Gate version 27.2 with improved bounds checking.
CVE-2026-113939 is an out-of-bounds write vulnerability in macOS Golden Gate that could be triggered by mounting a maliciously crafted disk image. This flaw may cause unexpected system termination or kernel memory corruption. The issue has been fixed in macOS Golden Gate version 27.2 with improved bounds checking.
An out-of-bounds read vulnerability in macOS Golden Gate was addressed by improved bounds checking. This flaw could allow an application to cause unexpected system termination or read kernel memory. The issue is fixed in macOS Golden Gate version 27.2.
An out-of-bounds write vulnerability in macOS Golden Gate was fixed by improving bounds checking. This flaw could allow an application to cause unexpected system termination or corrupt kernel memory. The issue is resolved in macOS Golden Gate version 27.2.
An out-of-bounds read vulnerability was fixed in macOS Golden Gate 27.2 by improving bounds checking. This flaw could allow an application to cause unexpected system termination.
A race condition vulnerability was addressed by adding additional validation in multiple Apple operating systems. The flaw could allow an app to access sensitive user data. The issue is fixed in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate 27.2 could allow an application to cause unexpected system termination. The issue has been fixed with improved bounds checking in version 27.2.
An out-of-bounds write vulnerability in macOS Golden Gate was fixed by improving bounds checking. Exploiting this flaw by mounting a maliciously crafted disk image could cause unexpected system termination or kernel memory corruption. The issue is resolved in macOS Golden Gate version 27.2.
CVE-2026-113948 is a permissions vulnerability in macOS Golden Gate that allowed an app to modify protected parts of the file system. The issue was addressed by adding additional restrictions and is fixed in macOS Golden Gate version 27.2.
An out-of-bounds read vulnerability in macOS Golden Gate was fixed by improving bounds checking. This flaw could allow an application to cause unexpected system termination. The issue is resolved in macOS Golden Gate version 27.2.
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An attacker in physical proximity may be able to corrupt process memory.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel memory.
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing web content may disclose sensitive information.
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to unexpected memory modification.
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. A malicious application may be able to bypass Privacy preferences.