CVE-2026-84524

CVE-2026-84524 is an out-of-bounds read in Apple's FontParser component, affecting a wide range of Apple platforms including iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 (Apple Watch Series 9 and later)....

CVE-2026-84524

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected...

CVE-2026-43697

CVE-2026-43697 is an out-of-bounds read in macOS triggered by processing a maliciously crafted 3D file , addressed with improved bounds checking. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 , and was patched in Apple's September 2026 security update. The NVD a...

CVE-2026-84564

CVE-2026-84564 is an uninitialized memory flaw in multiple Apple platforms, triggered when processing a maliciously crafted image , which may lead to disclosure of process memory . Apple addressed the issue with improved memory initialization in iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golde...

CVE-2026-84564

An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result i...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

EUVD-2026-77886

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory...

CVE-2026-84620

CVE-2026-84620 is an integer overflow in Apple's 3D model processing pipeline, addressed through improved input validation. Processing a maliciously crafted 3D model may lead to memory corruption . The vulnerability affects multiple Apple platforms and is fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 ...

EUVD-2026-78050

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-64752

CVE-2026-64752 is a memory corruption vulnerability (classified as an out-of-bounds write by Rapid7) in CoreMedia , Apple's media processing framework. Processing a maliciously crafted image may lead to arbitrary code execution . Apple addressed the issue by removing the vulnerable code , with fi...

CVE-2026-64752

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-84571

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84571

CVE-2026-84571 is a buffer overflow in Apple's CoreUI framework, addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination , representing a denial-of-service impact rather than code execution. The vulnerability affects iOS 27, iPadOS 27...

EUVD-2026-78046

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84571

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

EUVD-2026-78045

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to...

CVE-2026-84526

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to...

CVE-2026-84526

CVE-2026-84526 is an out-of-bounds write vulnerability in Apple's 3D scene processing component, addressed with improved bounds checking . The impact is unexpected process termination (denial of service) when processing a maliciously crafted 3D scene . The fix is included in iOS 26.7, iPadOS 26.7...

CVE-2026-86869

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...

EUVD-2026-78018

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...