macOS 15.1

[Apple libarchive] Processing a malicious crafted file may lead to a denial-of-service

[Apple Screen Sharing Server] A user with screen sharing access may be able to view another user's screen

[Apple Apache] Multiple issues existed in Apache

[Apple Apache] Multiple issues existed in Apache

[Apple Apache] Multiple issues existed in Apache

[Apple LaunchServices] An app may be able to break out of its sandbox

[Apple GPU Drivers] An app may be able to cause unexpected system termination

[Apple Photos] An app may be able to access Contacts without user consent

[Apple PackageKit] An app may be able to bypass Privacy preferences

[Apple PackageKit] An app may be able to bypass Privacy preferences

[Apple Siri] An app may be able to access sensitive user data

[Apple Quick Look] An app may be able to read arbitrary files

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple IOGPUFamily] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Siri] An app may be able to read sensitive location information

[Apple StorageKit] An app may be able to access user-sensitive data

[Apple Sandbox] An app may be able to access user-sensitive data

[Apple WebKit] Cookies belonging to one origin may be sent to another origin

[Apple CUPS] An attacker in a privileged network position may be able to leak sensitive user information

[Apple ImageIO] Processing an image may result in disclosure of process memory

[Apple Installer] An app may be able to access user-sensitive data

[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption

[Apple Sandbox] A malicious application with root privileges may be able to access private information

[Apple Maps] An app may be able to read sensitive location information

[Apple Login Window] An attacker with physical access to a Mac may be able to view protected content from the Login Win…

[Apple Safari Private Browsing] Private browsing may leak some browsing history

[Apple Login Window] A person with physical access to a Mac may be able to bypass Login Window during a software update

[Apple AppleAVD] Parsing a maliciously crafted video file may lead to unexpected system termination

[Apple AppleAVD] Parsing a maliciously crafted video file may lead to unexpected system termination

[Apple AppleAVD] Parsing a maliciously crafted video file may lead to unexpected system termination

[Apple sips] Processing a maliciously crafted file may lead to unexpected app termination

[Apple sips] Processing a maliciously crafted file may lead to unexpected app termination

[Apple IOMobileFrameBuffer] An app may be able to corrupt coprocessor memory

[Apple Kernel] An app may be able to leak sensitive kernel state

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple IOMobileFrameBuffer] An attacker may be able to cause unexpected system termination or arbitrary code execution …

[Apple IOMobileFrameBuffer] An attacker may be able to cause unexpected system termination or arbitrary code execution …

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple PackageKit] A malicious application may be able to modify protected parts of the file system

[Apple XPC] An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple Shortcuts] An app may be able to access sensitive user data

[Apple App Support] A malicious app may be able to run arbitrary shortcuts without user consent

[Apple Messages] An app may be able to break out of its sandbox

[Apple WindowServer] An app may be able to access sensitive user data

[Apple Safari Downloads] An attacker may be able to misuse a trust relationship to download malicious content

[Apple Assets] A malicious app with root privileges may be able to modify the contents of system files

[Apple SystemMigration] A malicious app may be able to create symlinks to protected regions of the disk

[Apple Game Controllers] An attacker with physical access can input Game Controller events to apps running on a locked …

[Apple PackageKit] A malicious application may be able to modify protected parts of the file system

[Apple Shortcuts] A malicious app may use shortcuts to access restricted files

[Apple AppleMobileFileIntegrity] A sandboxed process may be able to circumvent sandbox restrictions

[Apple CoreMedia Playback] A malicious app may be able to access private information

[Apple PackageKit] A malicious application may be able to modify protected parts of the file system

[Apple Pro Res] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Siri] A sandboxed app may be able to access sensitive user data in system logs

[Apple sips] Parsing a file may lead to disclosure of user information

[Apple AppleMobileFileIntegrity] An app may be able to modify protected parts of the file system

[Apple sips] Parsing a file may lead to disclosure of user information

[Apple Foundation] Parsing a file may lead to disclosure of user information

[Apple sips] Parsing a maliciously crafted file may lead to an unexpected app termination

[Apple sips] Parsing a maliciously crafted file may lead to an unexpected app termination

[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple LaunchServices] An attacker with physical access can input keyboard events to apps running on a locked device

[Apple Installer] A malicious application may be able to modify protected parts of the file system

[Apple Find My] An app may be able to read sensitive location information

[Apple Weather] An app may be able to determine a user’s current location

[Apple Notification Center] An app may be able to access sensitive user data

[Apple Notification Center] A user may be able to view sensitive user information

[Apple PackageKit] An attacker with root privileges may be able to delete protected system files

[Apple CoreServicesUIAgent] An app may be able to modify protected parts of the file system

[Apple WebKit] Processing maliciously crafted web content may prevent Content Security Policy from being enforced

[Apple ImageIO] Processing a maliciously crafted message may lead to a denial-of-service

[Apple Contacts] An app may be able to access information about a user's contacts

[Apple IOMobileFrameBuffer] An attacker may be able to cause unexpected system termination or arbitrary code execution …

[Apple PackageKit] A malicious application may be able to modify protected parts of the file system

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple PackageKit] A malicious application may be able to modify protected parts of the file system

[Apple NetAuth] A malicious application may be able to leak a user's credentials

[Apple Calendar] An attacker with access to calendar data could also read reminders

[Apple Security] A remote attacker may be able to cause a denial-of-service

[Apple Dock] An app may be able to access sensitive user data