macOS 15.5

[Apple libexpat] Multiple issues in libexpat, including unexpected app termination or arbitrary code execution

[Apple OpenSSH] Multiple issues in OpenSSH

[Apple OpenSSH] Multiple issues in OpenSSH

[Apple SoftwareUpdate] An app may be able to gain elevated privileges

[Apple Kernel] A remote attacker may be able to cause unexpected system termination

[Apple Notification Center] An app may be able to access sensitive user data

[Apple WebKit] A type confusion issue could lead to memory corruption

[Apple BOM] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple Mobile Device Service] A malicious app may be able to gain root privileges

[Apple Libinfo] An app may be able to bypass ASLR

[Apple AppleMobileFileIntegrity] An app may be able to access user-sensitive data

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple WebKit] A malicious website may exfiltrate data cross-origin

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple CoreAudio] Parsing a file may lead to an unexpected app termination

[Apple CoreGraphics] Parsing a file may lead to disclosure of user information

[Apple Core Bluetooth] An app may be able to access sensitive user data

[Apple Security] An app may be able to access associated usernames and websites in a user's iCloud Keychain

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple NetworkExtension] An app may be able to observe the hostnames of new network connections

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple Weather] A malicious app may be able to read sensitive location information

[Apple Security] A remote attacker may be able to leak memory

[Apple mDNSResponder] A user may be able to elevate privileges

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple Sandbox] An app may be able to bypass certain Privacy preferences

[Apple ImageIO] Processing a maliciously crafted image may lead to a denial-of-service

[Apple Installer] A sandboxed app may be able to access sensitive user data

[Apple CoreMedia] Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process…

[Apple Pro Res] An attacker may be able to cause unexpected system termination or corrupt kernel memory

[Apple Audio] An app may be able to cause unexpected system termination

[Apple Finder] An app may be able to access sensitive user data

[Apple afpfs] Mounting a maliciously crafted AFP network share may lead to system termination

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

[Apple CoreMedia] Parsing a file may lead to an unexpected app termination

[Apple afpfs] Mounting a maliciously crafted AFP network share may lead to system termination

[Apple Kernel] A remote attacker may cause an unexpected app termination

[Apple StoreKit] An app may be able to access sensitive user data

[Apple quarantine] An app may be able to break out of its sandbox

[Apple Pro Res] An app may be able to cause unexpected system termination

[Apple afpfs] Connecting to a malicious AFP server may corrupt kernel memory

[Apple SharedFileList] An attacker may gain access to protected parts of the file system

[Apple UserAccountUpdater] An app may be able to access sensitive user data

[Apple Sandbox] An app may be able to access sensitive user data

[Apple TCC] An app may be able to access sensitive user data

[Apple AppleJPEG] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

[Apple Notes] Hot corner may unexpectedly reveal a user’s deleted notes

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple RemoteViewServices] An app may be able to break out of its sandbox

[Apple Apple Intelligence Reports] An app may be able to access sensitive user data

[Apple Safari] A website may be able to spoof the domain name in the title of a pop-up window

[Apple Wi-Fi] An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory