CVE-2026-65406

A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to access sensitive user data...

EUVD-2026-77972

A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-65369

CVE-2026-65369 is a Gatekeeper bypass vulnerability in macOS , caused by a logic issue in state management. A malicious application can bypass Gatekeeper checks, allowing unauthorized code to run on the system. The flaw is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 ...

CVE-2026-65369

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks...

EUVD-2026-77971

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks...

CVE-2026-84540

CVE-2026-84540 is an authorization issue in macOS addressed with improved state management. An app may be able to access sensitive user data . The vulnerability is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . NVD scores it 5.5 (MEDIUM) with a local attack vector, lo...

EUVD-2026-77970

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-28938

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user...

EUVD-2026-77964

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user...

CVE-2026-28938

CVE-2026-28938 is a privacy vulnerability in iOS and iPadOS prior to version 26.6 , where an app may be able to fingerprint the user . The issue was addressed by moving sensitive data , implying that data previously accessible to apps was repositioned to reduce exposure. The vulnerability is scor...

EUVD-2026-77962

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-65345

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-65345

CVE-2026-65345 is a permissions issue in Apple's iOS, iPadOS, and macOS, where an app may be able to access user-sensitive data due to insufficient access restrictions. The issue was addressed with additional restrictions. Affected versions are fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27...

CVE-2026-84583

CVE-2026-84583 affects Apple's AuthKit component across multiple platforms. A permissions issue allowed a local app to read a persistent account identifier , a privacy-relevant information disclosure. The flaw was resolved through additional restrictions in iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27,...

EUVD-2026-77961

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

CVE-2026-84583

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

EUVD-2026-77960

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to read persistent device identifiers...

CVE-2026-84612

CVE-2026-84612 is an authorization issue in Apple's DeviceCheck framework, fixed via improved access control across iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. The flaw allows an app to read persistent d...

CVE-2026-86910

CVE-2026-86910 is a permissions issue in the APFS (Apple File System) component of macOS, addressed through improved path validation . The vulnerability allows an application to access restricted files , rated CVSS 5.5 (Medium) with a local attack vector, no privileges required, but user interact...

EUVD-2026-77959

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files...