CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86883

CVE-2026-86883 is a privacy vulnerability in Apple iOS, iPadOS, and visionOS caused by insufficient file handling . An app may be able to access sensitive user data. The issue is rated MEDIUM (CVSS 5.5) with a local attack vector requiring user interaction, resulting in high confidentiality impac...

EUVD-2026-78120

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

CVE-2026-65393 is a permissions issue in the Xcode IDE component, available for macOS Tahoe 26.6 and later . The underlying cause was insufficient validation of permissions, which was addressed with improved validation. An application may be able to access user-sensitive data . The fix is availab...

EUVD-2026-78118

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-64701

CVE-2026-64701 is a permissions issue in macOS that was addressed with additional restrictions. The vulnerability allows a malicious app to potentially gain root privileges , constituting a high-impact local privilege escalation. The issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 . C...

CVE-2026-64701

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-84555

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data...

CVE-2026-84578

CVE-2026-84578 is a sandbox escape vulnerability in macOS , described as a logic issue addressed with improved checks. An app may be able to break out of its sandbox, with a CVSS 3.1 score of 8.8 (High) — local attack vector, low complexity, low privileges required, changed scope, and full impact...

EUVD-2026-78101

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-84578

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-86904

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

CVE-2026-84606

This privacy vulnerability in Apple products allows an app to identify a user across reinstalls due to improper handling of identifiers. It affects iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , all of which include the fix. The CVSS 3.1 score is 7.5 (HIGH) , with the primary impact o...

EUVD-2026-78097

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls...

CVE-2026-84606

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls...

CVE-2026-86894

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

EUVD-2026-77949

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-86894

CVE-2026-86894 is a logic issue in Apple macOS Golden Gate 27 that was resolved with improved checks, allowing a malicious app to break out of its sandbox . Apple assigned a CVSS 3.1 score of 7.5 (High) with a network vector requiring no privileges or user interaction, impacting integrity. The CI...

CVE-2026-65404

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences...