visionOS 27.2.1
149724
Summary
No separate summary was provided in the collected bulletin.
View 7 component changes
AirPlay
Available for: macOS Tahoe
Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113968: Apple
Bluetooth
Available for: macOS Tahoe
Impact: An attacker in Bluetooth range may be able to corrupt process memory
Description: A use-after-free issue was addressed with improved memory management.
CVE-2026-113970: Apple
CoreUtils
Available for: macOS Tahoe
Impact: A malicious Bluetooth device may be able to establish a pairing without user interaction
Description: This issue was addressed with improved checks.
CVE-2026-113965: Apple
CoreUtils
Available for: macOS Tahoe
Impact: An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction
Description: A logic issue was addressed with improved state management.
CVE-2026-113964: an anonymous researcher
Messages
Available for: macOS Tahoe
Impact: A user added to an iMessage group may be able to access messages sent before they joined
Description: This issue was addressed by removing the vulnerable code.
CVE-2026-113960: an anonymous researcher
Messages
Available for: macOS Tahoe
Impact: A remote attacker may be able to join an iMessage group chat and receive its messages
Description: An authorization issue was addressed with improved validation.
CVE-2026-113961: an anonymous researcher
rapportd
Available for: macOS Tahoe
Impact: An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts
Description: A logic issue was addressed with improved state management.
CVE-2026-113969: Apple
Products covered
macOS Tahoe
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 7
Updates
- Published by Apple Security Releases
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.