CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

CVE-2026-43683

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory...

CVE-2026-43690

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory...

EUVD-2026-78102

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84596

An out-of-bounds read vulnerability exists in several Apple products, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is insufficient bounds checking when processing a maliciously crafted font , which can result in the disclosure of pr...

CVE-2026-84597

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84597

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

EUVD-2026-78100

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84597

An out-of-bounds read vulnerability exists in the FontParser component of Apple products. Processing a maliciously crafted font can result in the disclosure of process memory . This issue was addressed with improved input validation and is fixed in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS...

EUVD-2026-77942

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

CVE-2026-43687

A race condition exists in the macOS NFS client (com.apple.filesystems.nfs) within the _nfs_vnop_access function. The vulnerability stems from an unsynchronized read of the nfsnode+0x158 pointer, which points to a per-UID access-cache array. A malicious NFSv3 server can trigger a reallocation of ...

EUVD-2026-77930

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-43788

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

EUVD-2026-77917

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2026-43788

The macOS Golden Gate 27 software is vulnerable to an integer overflow due to insufficient input validation. Processing a maliciously crafted file can lead to a denial-of-service (DoS) or the disclosure of memory contents . The issue has been addressed with improved input validation in macOS Gold...

CVE-2026-43788

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2026-86903

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-86903

Apple has addressed an out-of-bounds read vulnerability across multiple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause was identified as insufficient input validation, which could allow an application to disclose ke...

EUVD-2026-77902

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Opening a maliciously crafted file may cause unexpected process...