macOS 27.2

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, m…

The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. …

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, v…

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Gol…

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoi…

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gat…

A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.…

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watch…

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, mac…

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

[Apple Spotlight] An app may be able to gain elevated privileges

[Apple Heimdal] A remote attacker may cause an unexpected process termination

[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Mail] Processing a maliciously crafted message may lead to a denial-of-service

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple SceneKit] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

[Apple HFS] An app may be able to cause unexpected system termination or read kernel memory

[Apple SceneKit] Processing a 3D model may result in disclosure of process memory

[Apple Remote Management] A remote attacker may be able to cause arbitrary code execution

[Apple DesktopServices] An app may bypass Gatekeeper checks

[Apple ColorSync] Processing a maliciously crafted file may disclose process memory

[Apple Security] An app may be able to gain root privileges

[Apple FontParser] An app may be able to access sensitive user data

[Apple Security] An app may be able to gain root privileges

[Apple Security] An app may be able to gain root privileges

[Apple Kernel] An unprivileged attacker may be able to execute arbitrary code as root

[Apple Spotlight] An app may be able to access sensitive user data

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple Wi-Fi] An app may be able to cause unexpected system termination or corrupt process memory

[Apple DesktopServices] An app may be able to bypass Gatekeeper checks

[Apple Time Machine] An app may be able to bypass Privacy preferences

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple smbx] A remote attacker may be able to cause a denial-of-service or disclose process memory

[Apple System Settings] An app may be able to break out of its sandbox

[Apple Shortcuts] An app may be able to access sensitive user data

[Apple HFS] Processing a maliciously crafted file may lead to heap corruption

[Apple Remote Management] An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

[Apple IOMobileFrameBuffer] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple Control Center] A malicious application may be able to bypass Privacy preferences

[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption

[Apple App Store] An app may be able to bypass network restrictions

[Apple Core Image] Processing a maliciously crafted image may lead to unexpected process termination

[Apple Screen Sharing Server] An attacker with the legacy VNC password for Screen Sharing may be able to copy files to the Mac

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

[Apple HFS] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple IOKit] An app may be able to cause unexpected system termination or read kernel memory

[Apple USB] A malicious USB device may be able to cause unexpected system termination or read kernel memory

[Apple Remote Management] A user with screen sharing access may be able to view another user's screen

[Apple Screen Sharing Server] An attacker on the local network may be able to cause unexpected process termination or disclose process memory

[Apple Screen Sharing Server] An attacker on the local network may be able to corrupt process memory

[Apple Directory Utility] An app may be able to modify protected parts of the file system

[Apple Screen Sharing Server] A malicious application may be able to execute arbitrary code with system privileges

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple Model I/O] Processing a 3D model may lead to unexpected app termination

[Apple Storage] An app may be able to gain root privileges

[Apple ImageIO] Processing a maliciously crafted image may corrupt process memory

[Apple RealityKit] Processing a maliciously crafted file may lead to unexpected app termination

[Apple StorageKit] An app may be able to gain root privileges

[Apple SecurityAgent] An app may be able to gain root privileges

[Apple LaunchServices] An app may bypass Gatekeeper checks

[Apple SoftRAID] An app may be able to cause unexpected system termination or read kernel memory

[Apple libxpc] An app may be able to break out of its sandbox

[Apple quarantine] An app may be able to break out of its sandbox

[Apple Mail] The user's original email address may be leaked when using the Hide My Email feature

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple Disk Images] An app may be able to cause a denial-of-service

[Apple StorageKit] An app may be able to modify protected parts of the file system

[Apple smbx] A malicious Screen Sharing peer may be able to corrupt process memory

[Apple Security] An app may be able to access sensitive user data

[Apple udf] An app may be able to cause unexpected system termination or read kernel memory

[Apple smbx] A remote attacker may be able to cause a denial-of-service

[Apple Screen Sharing Server] A malicious Screen Sharing peer may be able to create arbitrary symlinks as root

[Apple System Settings] An app may be able to bypass Gatekeeper checks

[Apple Printing] An app may be able to break out of its sandbox

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple IOHIDFamily] An attacker may be able to cause unexpected system termination or read kernel memory

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Heimdal] An attacker in a privileged network position may be able to impersonate a Kerberos KDC

[Apple Screen Sharing] Connecting to a malicious VNC server may cause a denial-of-service

[Apple Security] A sandboxed process may be able to circumvent sandbox restrictions

[Apple libarchive] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Help Viewer] An app may be able to access user-sensitive data

[Apple udf] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple APFS] An app may be able to cause unexpected system termination or read kernel memory

[Apple smbx] A remote attacker may be able to cause unexpected app termination

[Apple udf] An app may be able to cause unexpected system termination

[Apple CVMS] An app may be able to gain root privileges

[Apple AppleRAID] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple IOGPUFamily] An app may be able to access sensitive user data

[Apple dyld] An app may be able to bypass sandbox restrictions

[Apple StorageKit] An app may be able to modify protected parts of the file system

[Apple APFS] An app may be able to cause unexpected system termination or write kernel memory

[Apple Wi-Fi] An app may be able to read sensitive location information

[Apple AppleMobileFileIntegrity] A malicious app may be able to read or write to protected files

[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected app termination

[Apple StorageKit] An app may be able to gain root privileges

[Apple ppp] A malicious app may be able to intercept network traffic

[Apple Kernel] A malicious app may be able to break out of its sandbox

[Apple AppleRAID] Mounting a malicious disk image may cause unexpected system termination

[Apple configd] An app may be able to gain root privileges

[Apple StorageKit] An app may be able to gain root privileges

[Apple ncurses] An app may be able to cause a denial-of-service

[Apple AirPort] An app may be able to read sensitive location information

[Apple SMB] An attacker with control of a network file server may be able to cause unexpected system termination

[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination

[Apple IOStorageFamily] An app may be able to cause unexpected system termination or read kernel memory

[Apple zsh] A malicious app may be able to break out of its sandbox

[Apple System Settings] An attacker may tamper with code-signed applications to execute arbitrary code in the application's context

[Apple Spotlight] A malicious application may be able to bypass Privacy preferences

[Apple Spotlight] An app may be able to access sensitive user data

[Apple Shortcuts] An app may be able to access sensitive user data

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple Printing] A malicious app may be able to break out of its sandbox

[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

[Apple Spotlight] A malicious application may be able to bypass Privacy preferences

[Apple ArchiveService] Processing a maliciously crafted file may bypass Gatekeeper checks

[Apple quarantine] An app may be able to break out of its sandbox

[Apple DiskArbitration] An app may be able to break out of its sandbox

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple WindowServer] An app may be able to monitor keystrokes without user permission

[Apple Kernel] An app may be able to cause unexpected changes to copy-on-write memory

[Apple TCC] An app may be able to access sensitive user data

[Apple Thread] An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network

[Apple HomeKit] Processing a maliciously crafted video file may lead to unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple CoreSymbolication] Processing a maliciously crafted file may lead to unexpected app termination

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple mDNSResponder] A remote attacker may be able to leak memory

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple Screen Time] An app may be able to access sensitive user data

[Apple iCloud] An app may be able to access sensitive user data

[Apple Wi-Fi] An attacker in a privileged network position may be able to cause a denial-of-service

[Apple LinkPresentation] Processing a maliciously crafted image may result in memory corruption

[Apple Wi-Fi] An attacker in radio range may be able to cause unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Kernel] An app may be able to bypass Privacy preferences

[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption

[Apple WebKit JavaScript Bindings] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple Spotlight] An app may be able to access sensitive user data

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

[Apple WebKit Canvas] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple WebKit Process Model] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple iCloud] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Security] An malicious app may be able to bypass certificate validation

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple Siri] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Photos Storage] An app may be able to bypass certain Privacy preferences

[Apple Kernel] An app may be able to determine kernel memory layout

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple Security] An app may be able to gain root privileges

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple BOM] Processing a maliciously crafted file may lead to heap corruption

[Apple Mail] A remote attacker may be able to cause a denial-of-service

[Apple BOM] A maliciously crafted ZIP archive may bypass Gatekeeper checks

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple Audio] An app may be able to access sensitive user data

[Apple Photos Storage] An app may be able to access a user's Photos Library

[Apple RemoteManagement] An application may be able to execute arbitrary code with system privileges

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

[Apple Messages] A remote attacker may be able to cause unexpected app termination

[Apple FontParser] Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Siri] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

[Apple Kernel] An app may be able to cause unexpected system termination

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

[Apple AppleAVD] A malicious app may be able to break out of its sandbox

[Apple CoreAudio] An app may be able to cause unexpected system termination or corrupt process memory

[Apple FileProvider] An app may be able to access sensitive user data

[Apple WebKit Process Model] A remote attacker may be able to break out of Web Content sandbox

[Apple ppp] An app may be able to cause unexpected system termination

[Apple Kernel] An app may be able to gain root privileges

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to unexpected memory modification

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Wi-Fi] An attacker in physical proximity may be able to corrupt process memory

[Apple Security] Processing web content may disclose sensitive information

[Apple MediaAnalysis] An app may be able to access sensitive user data

[Apple CoreStorage] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple CoreStorage] An app may be able to cause unexpected system termination

[Apple CoreStorage] An app may be able to cause unexpected system termination

[Apple CoreStorage] An app may be able to cause unexpected system termination

[Apple CoreStorage] An app may be able to cause unexpected system termination

[Apple CoreStorage] Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

[Apple CoreStorage] An app may be able to cause unexpected system termination

[Apple CoreStorage] An app may be able to cause unexpected system termination or read kernel memory

[Apple CoreStorage] An app may be able to cause unexpected system termination or read kernel memory

[Apple CoreStorage] Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

[Apple CoreStorage] An app may be able to cause unexpected system termination or read kernel memory

[Apple CoreStorage] An app may be able to cause unexpected system termination

[Apple CoreStorage] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple GPUTools] Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution

[Apple PackageKit] An app may be able to modify protected parts of the file system

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] A website may be able to use a media format that should be restricted in Lockdown Mode

[Apple CUPS] A local attacker may be able to elevate their privileges

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple Screen Sharing Server] A remote attacker may cause an unexpected process termination

[Apple Photos Storage] An app may be able to access sensitive user data

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

[Apple APFS] Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

[Apple Screen Sharing Server] A remote attacker may be able to cause unexpected app termination or heap corruption

[Apple CloudKit] A malicious app may be able to gain root privileges

[Apple Quick Look] An app may be able to access sensitive user data

[Apple Security] An app may be able to gain root privileges

[Apple ArchiveService] An app may bypass Gatekeeper checks

[Apple Archive Utility] An attacker with root privileges may be able to access protected user data

[Apple Carbon Core] An app may bypass Gatekeeper checks

[Apple Heimdal] A remote attacker may be able to cause a denial-of-service

[Apple libcryptex] A malicious app may be able to create files in protected directories

[Apple SMB] An app may be able to cause unexpected system termination or corrupt kernel memory

[Apple System Preferences] A malicious app may be able to access restricted system interfaces or launder launch attribution

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple HomeKit] An app may be able to access sensitive user data

[Apple Siri] An app may be able to access information about a user's contacts

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple CoreMedia] A malicious app may be able to access the camera without user permission

[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected process termination