CVE-2026-112457

This vulnerability involves a double free issue in macOS caused by improper memory management. An attacker located on the local network could potentially cause unexpected system termination or corrupt process memory . The issue has been addressed with improved memory management in macOS Golden Ga...

CVE-2026-112512

A path handling issue in macOS allows an application to potentially bypass Gatekeeper checks . The vulnerability was addressed by implementing improved validation. The issue is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit details or in-the-...

CVE-2026-112705

An out-of-bounds write issue exists in several Apple operating systems, including iOS, iPadOS, macOS, and tvOS . The root cause involves insufficient bounds checking, which could allow an app to cause unexpected system termination . Remediation is provided in versions iOS 26.7.2, iPadOS 26.7.2, i...

CVE-2026-113952

A logic issue in Safari , iOS , iPadOS , and macOS (Golden Gate) allows a website to use a media format that is intended to be restricted under Lockdown Mode . The issue was addressed by implementing improved checks. The vulnerability is fixed in Safari 27.2 , iOS 26.7.2 and 27.2 , iPadOS 26.7.2 ...

CVE-2026-112640

A use-after-free vulnerability exists in several Apple products due to insufficient memory management. Processing maliciously crafted web content can result in memory corruption . This issue is addressed in Safari 27.2 , iOS 26.7.2/27.2 , iPadOS 26.7.2/27.2 , macOS Golden Gate 27.2 , tvOS 27.2 , ...

CVE-2026-112569

This vulnerability involves an access issue in macOS where an application may be able to break out of its sandbox . The issue has been addressed by implementing additional sandbox restrictions. Fixed versions include macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No spec...

CVE-2026-86877

A path traversal issue exists in macOS Golden Gate , which was addressed through improved path validation. A malicious application could potentially delete files for which it does not have the required privileges. The fix for this vulnerability is included in macOS Golden Gate 27 . No specific ex...

CVE-2026-116581

The Seroval library (prior to version 1.6.8 ) is vulnerable to an unauthenticated Denial of Service (DoS) via the fromJSON and fromCrossJSON deserializers. The root cause is a lack of validation for a sequence node's done index; a crafted index can create an iterator that never finishes, causing ...

CVE-2026-112617

An information disclosure issue was identified in macOS Golden Gate , where an application might be able to access sensitive user data . The root cause involved flawed logic, which was addressed with improved logic . This vulnerability is fixed in version 27.2 . No specific exploit details or in-...

CVE-2026-112494

A file quarantine bypass vulnerability in macOS allows an application to bypass Gatekeeper checks. The issue was addressed by implementing additional checks. The vulnerability is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 . No specific exploit details or in-the-wild exploitation infor...

CVE-2026-112601

The vulnerability in macOS Sequoia involves an integer overflow that could allow an application to cause a denial-of-service (DoS). The root cause was addressed by implementing improved input validation . The issue is fixed in macOS Sequoia 15.8.2 . No specific exploit information or in-the-wild ...

CVE-2026-113913

An input validation issue exists in several Apple operating systems, where processing web content may lead to the disclosure of sensitive information . This vulnerability has been addressed through improved input validation. Affected versions include iOS 26.7.2, iOS 27.2, iPadOS 26.7.2, iPadOS 27...

CVE-2026-86973

The software components Safari 27.2 , iOS 26.7.2 , iPadOS 26.7.2 , iOS 27.2 , iPadOS 27.2 , and macOS Golden Gate 27.2 are affected by an out-of-bounds read vulnerability. The root cause is related to insufficient bounds checking, which can be triggered by processing maliciously crafted web conte...

CVE-2026-112482

An out-of-bounds write issue exists in macOS that can allow an attacker on the local network to corrupt process memory . The vulnerability was addressed by implementing improved bounds checking. This issue is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No spe...

CVE-2026-112656

An out-of-bounds read vulnerability exists in several Apple platforms. Processing a maliciously crafted font may result in the disclosure of process memory . This issue has been addressed with improved bounds checking. Affected systems include iOS , iPadOS , macOS (including Golden Gate, Sequoia,...

CVE-2026-113944

An out-of-bounds read vulnerability exists in macOS Golden Gate (versions prior to 27.2) due to insufficient bounds checking. A malicious application could potentially cause unexpected system termination or read kernel memory . The issue was addressed with improved bounds checking and is fixed in...

CVE-2026-64750

An out-of-bounds write issue exists in several Apple operating systems, including iOS , iPadOS , macOS , and macOS Tahoe . The root cause is a lack of sufficient bounds checking when processing a maliciously crafted image , which may lead to memory corruption . This vulnerability is addressed in ...

CVE-2026-86978

This vulnerability affects iOS , iPadOS , macOS Golden Gate , and tvOS systems. Due to insufficient checks, an application may be able to access sensitive user data . The issue has been addressed with improved checks and is fixed in versions 27.2 for all mentioned platforms. No specific exploit i...

CVE-2026-112523

A vulnerability in macOS allows an application to potentially access user-sensitive data due to improper symlink handling . This issue is addressed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit information or in-the-wild exploitation details are p...

CVE-2026-112466

An out-of-bounds read vulnerability exists in multiple Apple operating systems due to insufficient input validation. This flaw could allow an application to cause unexpected system termination or read kernel memory . The issue has been addressed in the following versions: iOS 26.7.2, 27.2; iPadOS...