54 matches found
CVE-2026-28836
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device...
CVE-2026-20683
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
CVE-2026-20683
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
EUVD-2026-78039
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
CVE-2026-20683
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
CVE-2026-20683
An authentication issue in Apple's Apple Account component was addressed with improved state management. This vulnerability could allow an application to use the Sign In With Apple authentication flow to gain unauthorized access to a user's Apple Account. The flaw is fixed in iOS 27 , iPadOS 27 ,...
CVE-2026-28836
A correctness issue in macOS Sonoma allows an attacker with physical access to silently persist an Apple Account on an erased device. This vulnerability was addressed with improved checks. The issue is fixed in macOS Sonoma 14.8.8 . Exploitation details are not provided in the documents.
CVE-2026-28836
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device...
EUVD-2026-78031
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device...
CVE-2026-28836
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device...
CVE-2026-28836: Exposure of Private Personal Information to an Unauthorized Actor
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device...
CVE-2026-20683: Improper Authentication
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
PT-2026-91466
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
CVE-2026-20683: Improper Authentication
An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...
About the security content of macOS Sequoia 15.8
About the security content of macOS Sequoia 15.8 This document describes the security content of macOS Sequoia 15.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
PT-2026-91467
Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8.8 Description A correctness issue exists where an attacker with physical access to a device may be able to silently persist an Apple Account on a device that has been erased. Recommendations Update macOS...
CVE-2025-68640
The Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid PET Private Endpoint Token to enumerate devices and remove offline devices from an Apple ID account without triggering two-factor authentication or ownership verification. This may result in...
The vulnerability of the Apple Account component in operating systems such as iOS, iPadOS, watchOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Apple Account component in operating systems such as iOS, iPadOS, watchOS, and visionOS is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
About the security content of visionOS 26.1
About the security content of visionOS 26.1 This document describes the security content of visionOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of macOS Tahoe 26.1
About the security content of macOS Tahoe 26.1 This document describes the security content of macOS Tahoe 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...