Where
-Infinity
0
First published (updated )
Advisory
APPLE-149723
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 3
Source: MITRE
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 5
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 8
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 12
Source: NVD
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 7
Source: Apple
First published (updated )
First published (updated )
Advisory
APPLE-149722
Severity
5.4
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.

1 / 3
Source: MITRE
First published (updated )
Severity
5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 4
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
8.8
Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.

1 / 5
Source: MITRE
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.

1 / 8
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, tvOS 27.2.1, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.

1 / 12
Source: NVD
First published (updated )
Severity
5.4
Input Validation, Use After Free
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 7
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Use After Free
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AirPlay. A logic issue was addressed with improved state management.

1 / 9
Source: Apple
First published (updated )
Severity
3.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free, Infoleak
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 125
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 124
Source: Apple
First published (updated )
Severity
6.2
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.

1 / 128
Source: MITRE
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 140
Source: Apple
First published (updated )
Severity
4.7
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.

1 / 140
Source: MITRE
First published (updated )
Severity
5.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 197
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 197
Source: Apple
First published (updated )
Severity
5.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 174
Source: Apple
First published (updated )
Severity
7.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 210
Source: Apple
First published (updated )
Severity
6.2
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 114
Source: Apple
First published (updated )
Severity
4.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 217
Source: MITRE
First published (updated )
Severity
6.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.

1 / 204
Source: MITRE
First published (updated )
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 219
Source: MITRE
First published (updated )
Severity
8.8
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.

1 / 219
Source: NVD
First published (updated )
Severity
3.1
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 219
Source: MITRE
First published (updated )
Severity
4.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Accelerate Framework. An out-of-bounds write issue was addressed with improved bounds checking.

1 / 221
Source: Apple
First published (updated )
Severity
6.5
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.

1 / 210
Source: MITRE
First published (updated )
Severity
4.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 210
Source: MITRE
First published (updated )
Severity
4.3
Input Validation, Null Pointer Dereference, Buffer Overflow, Race Condition, Integer Overflow, Use After Free, Double Free
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.

1 / 223
Source: MITRE
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203