macOS 26.2

[Apple curl] Multiple issues in curl

[Apple curl] Multiple issues in curl

[Apple libarchive] Processing a file may lead to memory corruption

[Apple Icons] An app may be able to break out of its sandbox

[Apple File Bookmark] An app may be able to access user-sensitive data

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple CoreServices] An app may be able to access sensitive user data

[Apple Security] A remote attacker may be able to cause a denial-of-service

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple Multi-Touch] A malicious HID device may cause an unexpected process crash

[Apple Safari Downloads] A download's origin may be incorrectly associated

[Apple Notes] An attacker with physical access may be able to view deleted notes

[Apple sudo] An app may be able to access protected user data

[Apple Photos] Photos in the Hidden Photos Album may be viewed without authentication

[Apple Audio] An app may be able to cause a denial-of-service

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Networking] An app may be able to access sensitive user data

[Apple WebKit Web Inspector] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Kernel] An app may be able to elevate privileges

[Apple MDM Configuration Tools] An app may be able to read sensitive location information

[Apple Siri] An app may be able to access protected user data

[Apple Voice Control] A user with Voice Control enabled may be able to transcribe another user's activity

[Apple Call History] An app may be able to access protected user data

[Apple Foundation] An app may be able to inappropriately access files through the spellcheck API

[Apple AppleMobileFileIntegrity] An app may be able to access sensitive user data

[Apple AppleMobileFileIntegrity] An app may be able to access sensitive user data

[Apple AppleMobileFileIntegrity] An app may be able to access user-sensitive data

[Apple AppleMobileFileIntegrity] An app may be able to access sensitive user data

[Apple Safari] On a Mac with Lockdown Mode enabled, web content opened via a file URL may be able to use Web APIs that …

[Apple StorageKit] An app may be able to gain root privileges

[Apple VoiceOver] An app may be able to access sensitive user data

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Foundation] Processing malicious data may lead to unexpected app termination

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple Screen Time] An app may be able to access sensitive user data

[Apple AppleJPEG] Processing a file may lead to memory corruption

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

[Apple FaceTime] Password fields may be unintentionally revealed when remotely controlling a device over FaceTime

[Apple Messages] An app may be able to access sensitive user data

[Apple Screen Time] An app may be able to access a user’s Safari history

[Apple Game Center] An app may be able to access protected user data

[Apple Icons] An app may be able to identify what other apps a user has installed

[Apple File Bookmark] An app may be able to break out of its sandbox

[Apple WebKit] An app may be able to access sensitive user data

[Apple Kernel] An app may be able to gain root privileges

[Apple Call History] An attacker may be able to spoof their FaceTime caller ID

[Apple App Store] An app may be able to access sensitive payment tokens

[Apple AppSandbox] An app may be able to access protected user data

[Apple LaunchServices] An app may bypass Gatekeeper checks

[Apple AppSandbox] An app may be able to access protected files within an App Sandbox container

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

[Apple WebKit] Processing maliciously crafted web content may disclose internal states of the app