CVE-2026-116505

A command injection vulnerability exists in the TOTOLINK A950RG (version 4.1.2cu.5268_B20221104 ). The flaw is located in the getDeviceInfo function of the device-information Handler component, specifically affecting the file /var/lib/misc/udhcpd.leases . By manipulating the MAC address argument,...

CVE-2026-86925

An authorization issue exists in iOS, iPadOS, macOS Golden Gate, and visionOS that could allow an application to access sensitive user data . The vulnerability is addressed through improved state management . This issue is fixed in versions 27.2 of all affected platforms. No specific exploit info...

CVE-2026-84627

A buffer overflow vulnerability exists in several Apple operating systems, including iOS , iPadOS , macOS , and visionOS . The root cause is a lack of proper bounds checking when processing a maliciously crafted image , which may lead to heap corruption . This issue has been addressed with improv...

CVE-2026-113945

The macOS Golden Gate software is affected by an out-of-bounds read vulnerability, which can be triggered by an application to cause unexpected system termination . This issue has been addressed through improved bounds checking. The vulnerability is fixed in macOS Golden Gate 27.2 . No specific e...

CVE-2026-65327

A logic issue in macOS allows a local attacker to potentially elevate their privileges . The vulnerability was addressed by implementing improved checks. This issue is resolved in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit details or in-the-wild e...

CVE-2026-112529

An out-of-bounds read vulnerability exists in certain macOS versions, which can be triggered by an application to cause unexpected system termination . The issue was addressed by implementing improved bounds checking. The vulnerability is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , a...

CVE-2026-86972

A buffer overflow vulnerability exists in several Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . The root cause is inadequate size validation when processing maliciously crafted audio files , which can result in memory corruption . This issue is resolved in v...

CVE-2026-112483

A path handling issue exists in certain macOS versions, where an application may be able to modify protected parts of the file system . The vulnerability was addressed by improving validation. The issue is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specif...

CVE-2026-113912

An out-of-bounds access issue exists in several Apple operating systems, including iOS , iPadOS , macOS , tvOS , and visionOS . The vulnerability is triggered when processing a maliciously crafted media file , which can result in corrupt process memory or unexpected app termination . The issue wa...

CVE-2026-112495

This vulnerability involves an out-of-bounds read issue in macOS that can lead to unexpected system termination or the unauthorized reading of kernel memory . The root cause was addressed by implementing improved bounds checking. The issue is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2...

CVE-2026-86964

A null pointer dereference vulnerability in various Apple operating systems was addressed through improved input validation . The issue could allow an app to cause an unexpected system termination . This vulnerability is fixed in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Tahoe 26.7.2 , tv...

CVE-2026-113904

A use-after-free issue exists in several Apple products due to improper memory management. Processing maliciously crafted web content can result in an unexpected process crash . This vulnerability is addressed in Safari 27.2 , iOS 26.7.2/27.2 , iPadOS 26.7.2/27.2 , macOS Golden Gate 27.2 , tvOS 2...

CVE-2026-112616

An authorization issue exists in iOS , iPadOS , macOS Golden Gate , and visionOS that could allow an application to access sensitive user data . The root cause was addressed by improving access control mechanisms. The vulnerability is fixed in versions 27.2 of these operating systems. No specific...

CVE-2026-112568

A logic issue in macOS allows an attacker to bypass Gatekeeper checks by processing a maliciously crafted file. The vulnerability was addressed with improved checks. The issue is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit details or in-th...

CVE-2026-112704

An information leakage vulnerability exists in certain macOS versions, which could allow a malicious app to break out of its sandbox . The issue is addressed through additional validation. The vulnerability is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No sp...

CVE-2026-112456

An out-of-bounds write issue exists in various Apple operating systems, including iOS , iPadOS , macOS , and macOS Tahoe . The vulnerability is caused by insufficient input validation and can be triggered by processing a maliciously crafted file , potentially leading to heap corruption . This iss...

CVE-2026-112513

The vulnerability in macOS Golden Gate (pre-version 27.2 ) allows an application to potentially break out of its sandbox . The root cause is related to insufficient validation of symlinks . This issue is resolved in version 27.2 through improved validation logic. No specific exploit details or in...

CVE-2026-112544

The macOS operating system is affected by an out-of-bounds write issue caused by insufficient bounds checking. An attacker could exploit this by tricking a user into mounting a malicious disk image , which may lead to unexpected system termination . This vulnerability has been addressed in macOS ...

CVE-2026-112682

An input validation issue exists in multiple Apple operating systems, which could allow a remote attacker to cause unexpected app termination . The vulnerability has been addressed with improved input validation. Affected products include iOS , iPadOS , macOS Golden Gate , macOS Tahoe , visionOS ...

CVE-2026-112417

The visionOS operating system is affected by an integer overflow vulnerability. Processing a maliciously crafted 3D model can lead to memory corruption . This issue has been addressed with improved input validation and is fixed in visionOS 27.2 . No information regarding active exploitation is pr...