iPadOS 27.2

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, m…

An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access…

The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. …

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.…

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A maliciou…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, v…

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Gol…

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may …

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker i…

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27…

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visio…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoi…

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app ma…

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gat…

A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with p…

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watch…

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, mac…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

[Apple Spotlight] An app may be able to gain elevated privileges

[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Mail] Processing a maliciously crafted message may lead to a denial-of-service

[Apple SceneKit] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

[Apple SceneKit] Processing a 3D model may result in disclosure of process memory

[Apple FontParser] An app may be able to access sensitive user data

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple Shortcuts] An app may be able to access sensitive user data

[Apple HFS] Processing a maliciously crafted file may lead to heap corruption

[Apple IOMobileFrameBuffer] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple USB] A malicious USB device may be able to cause unexpected system termination or read kernel memory

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple Model I/O] Processing a 3D model may lead to unexpected app termination

[Apple ImageIO] Processing a maliciously crafted image may corrupt process memory

[Apple RealityKit] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Mail] The user's original email address may be leaked when using the Hide My Email feature

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple IOHIDFamily] An attacker may be able to cause unexpected system termination or read kernel memory

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Heimdal] An attacker in a privileged network position may be able to impersonate a Kerberos KDC

[Apple libarchive] Processing a maliciously crafted file may lead to unexpected app termination

[Apple ReplayKit] An app may be able to access sensitive user data

[Apple IOStorageFamily] An app may be able to cause unexpected system termination or read kernel memory

[Apple Shortcuts] An app may be able to access sensitive user data

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple Spotlight] A malicious application may be able to bypass Privacy preferences

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple Kernel] An app may be able to cause unexpected changes to copy-on-write memory

[Apple Thread] An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network

[Apple HomeKit] Processing a maliciously crafted video file may lead to unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple mDNSResponder] A remote attacker may be able to leak memory

[Apple Safety Check] An app may be able to access sensitive user data

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple Screen Time] An app may be able to access sensitive user data

[Apple Files] An app may be able to access sensitive user data

[Apple Wi-Fi] An attacker in a privileged network position may be able to cause a denial-of-service

[Apple LinkPresentation] Processing a maliciously crafted image may result in memory corruption

[Apple Wi-Fi] An attacker in radio range may be able to cause unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Kernel] An app may be able to bypass Privacy preferences

[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption

[Apple WebKit JavaScript Bindings] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple Spotlight] An app may be able to access sensitive user data

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple WebKit Canvas] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple WebKit Process Model] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple SpringBoard] An app may be able to cause unexpected system termination or corrupt process memory

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Security] An malicious app may be able to bypass certificate validation

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple Siri] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Photos Storage] An app may be able to bypass certain Privacy preferences

[Apple Kernel] An app may be able to determine kernel memory layout

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple Mail] A remote attacker may be able to cause a denial-of-service

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple Photos Storage] An app may be able to access a user's Photos Library

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

[Apple Power Management] An app may be able to fingerprint the user

[Apple Messages] A remote attacker may be able to cause unexpected app termination

[Apple FontParser] Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Siri] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple MediaRemote] An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

[Apple SwiftUI] An app may be able to cause unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

[Apple Maps] An app may be able to identify what other apps a user has installed

[Apple FileProvider] An app may be able to access sensitive user data

[Apple WebKit Process Model] A remote attacker may be able to break out of Web Content sandbox

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to unexpected memory modification

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Wi-Fi] An attacker in physical proximity may be able to corrupt process memory

[Apple Security] Processing web content may disclose sensitive information

[Apple MediaAnalysis] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] A website may be able to use a media format that should be restricted in Lockdown Mode

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple IOKit] A buffer overflow may result in memory corruption and unexpected app termination

[Apple Photos Storage] An app may be able to access sensitive user data

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

[Apple TextKit] An app may be able to read the device's name

[Apple Quick Look] An app may be able to access sensitive user data

[Apple System Preferences] A malicious app may be able to access restricted system interfaces or launder launch attribution

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple HomeKit] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple MobileGestalt] An app may be able to fingerprint the user

[Apple CoreMedia] A malicious app may be able to access the camera without user permission

[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected process termination