Security Vulnerabilities
This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.
CVSS Score
8.8
EPSS Score
0.002
Published
2026-10-20
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.
CVSS Score
4.7
EPSS Score
0.001
Published
2026-10-20
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.
CVSS Score
5.5
EPSS Score
0.002
Published
2026-10-20
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.
CVSS Score
5.5
EPSS Score
0.001
Published
2026-10-20
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts.
CVSS Score
3.3
EPSS Score
0.001
Published
2026-10-20
This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data.
CVSS Score
5.5
EPSS Score
0.001
Published
2026-10-20
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination.
CVSS Score
3.3
EPSS Score
0.002
Published
2026-10-20
An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination.
CVSS Score
4.3
EPSS Score
0.003
Published
2026-10-20
The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching.
CVSS Score
7.5
EPSS Score
0.002
Published
2026-10-20
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as output pixel indices. An attacker who controls the palette image can obtain stack contents from a returned PNG or GIF. This can disclose addresses and stack-canary data without an out-of-bounds access, memory corruption, or process crash. This issue is fixed in version 13.0.0.
CVSS Score
6.9
EPSS Score
0.003
Published
2026-10-19