CVE-2026-84507

A race condition exists in several Apple operating systems due to improper state handling . This vulnerability could allow an application to cause unexpected system termination or result in kernel memory corruption . The issue is addressed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS Go...

CVE-2026-86886

Apple has addressed a path traversal vulnerability affecting iOS , iPadOS , and watchOS . The root cause was a lack of proper input validation, which could allow an application to modify protected system files . This issue is resolved in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , and watchOS 2...

CVE-2026-64753

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

EUVD-2026-78015

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-64753

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may disclose sensitive user information...

CVE-2026-84546

Apple has addressed an out-of-bounds write vulnerability in several operating systems, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The root cause involves insufficient bounds checking when processing a maliciously crafted 3D model , which can lead to memory corruption . This ...

EUVD-2026-78010

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog may lead to unexpected process...

EUVD-2026-78009

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86890

A logic issue in iOS and iPadOS allows an attacker with physical access to a locked device to potentially view sensitive user information . The vulnerability has been addressed with improved checks. The issue is fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , and iPadOS 27 . Specific exploit details o...

CVE-2026-84497

A buffer overflow vulnerability exists in several Apple products, including iOS, iPadOS, macOS, tvOS, and visionOS . The flaw is caused by insufficient size validation and can be triggered by opening a maliciously crafted file , which may result in unexpected process termination . Affected versio...

CVE-2026-84602

A type confusion issue exists in various Apple operating systems, including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS . This vulnerability was addressed with improved checks to prevent an application from causing an unexpected system termination . The issue is fixed in the following version...

CVE-2026-84602

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-78006

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-65355

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

CVE-2026-65355

An information disclosure issue in Authentication Services and WebKit was addressed with improved state management across multiple Apple products. This vulnerability allowed a website to determine a user's IP address even when Private Relay was enabled. The issue is fixed in iOS 18.7.10 , iPadOS ...

EUVD-2026-78003

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...