weightBufs

WeightBufs: WeightBufs は、Neural Engine を搭載したすべての Apple デバイス向けのカーネル r/w エクスプロイトです。 バグとエクスプロイトは @simo36 によるものです。脆弱性と悪用手法の詳細については、POC での発表スライド をご覧ください。 このエクスプロイトはハードコードされたアドレスやオフセットに依存しておらず、macOS12 から 12.4 まで、および OS 15 から 15.5 まででそのまま動作するはずです。 カーネルの脆弱性はすべての iOS 15 バージョン（16.0 まで）に影響しますが、サンドボックスエスケープは...

Vulnerabilities exist in Apple macOS and Samba systems, developed by Apple and Samba.

Apple has identified several vulnerabilities in macOS specifically related to Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. These vulnerabilities include heap-based buffer overflows, use-after-free errors, integer overflows, null pointer dereferences, improper access control, privilege escalation...

EUVD-2026-78130

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

CVE-2026-84551

CVE-2026-84551 affects Apple's iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . It stems from a logic issue addressed through improved validation, which may allow an app to bypass network restrictions . The NVD-assigned CVSS 3.1 score is 4.4 (Medium) with a local attack ...

EUVD-2026-77954

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. A sandboxed app may be able to access restricted files...

CVE-2017-7520

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:52+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-02 01:03:29+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-08 20:00:04+00:00| published-proof-of-concept|...

CVE-2026-65339

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:49+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-09-15 04:47:11+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-1...

PT-2026-76847

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Tahoe versions prior to 26.6.2 Description An application may cause unexpected system termination or corrupt kernel memory due to improper memory handling. Recommendations Upda...

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

CVE-2026-64767

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

PT-2026-91523

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data...

SUSE CVE-2026-43715

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, iOS 26.7 and iPadOS 26.7, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to memory corruption...

The vulnerability in Apple’s operating systems, macOS Sequoia, macOS Tahoe, and iOS, relates to writing beyond the buffer limit, allowing an attacker to trigger a service failure.

The vulnerability of Apple operating systems, including macOS Sequoia, macOS Tahoe, and iOS, is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-12374 Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

CVE-2026-39868

This vulnerability affects multiple Apple operating systems, including iOS 18.7.10 , iPadOS 18.7.10 , iOS 26.5.2 , iPadOS 26.5.2 , macOS Sequoia 15.7.8 , macOS Sonoma 14.8.8 , macOS Tahoe 26.5.2 , tvOS 26.6 , visionOS 26.6 , and watchOS 26.6 . The root cause is linked to inadequate input validati...

CVE-2026-43745

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an...

Apple macOS 访问控制错误漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Tahoe 26.1 and earlier contained an access control vulnerability caused by permission issues, which could allow applications to access protected user data...