CVE-2026-86876

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions...

CVE-2026-84575

CVE-2026-84575 is an out-of-bounds write vulnerability in Apple's software stack, addressed through improved bounds checking . The specific component or file is not identified in the provided documents. The impact is limited: processing a maliciously crafted file may lead to unexpected app termin...

EUVD-2026-78107

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...

CVE-2026-84492

Apple addressed a race condition with improved state handling across multiple platforms, including iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and watchOS 27 . The vulnerability allows an app to cause unexpected ...

EUVD-2026-78106

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-78104

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel...

CVE-2026-84596

CVE-2026-84596 is an out-of-bounds read in Apple's font processing subsystem, addressed with improved bounds checking . The vulnerability is triggered by processing a maliciously crafted font , which may result in the disclosure of process memory . The issue affects iOS, iPadOS, macOS Golden Gate...

EUVD-2026-78100

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84606

CVE-2026-84606 is a privacy vulnerability in Apple platforms where improved handling of identifiers was required to prevent an app from identifying a user across reinstalls . The issue affects iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , all of which include the fix. The root cause ...

CVE-2026-43687

Apple kernel memory disclosure via NFS client . The root cause is a memory handling flaw that, when connecting to a malicious NFS server, may disclose kernel memory. The affected platforms span Apple's full ecosystem: iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Taho...

EUVD-2026-77935

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

EUVD-2026-77930

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-65371

CVE-2026-65371 is a kernel memory disclosure in Apple operating systems. According to a technical write-up by researcher vschko, the root cause is a gRegistryRoot KVA disclosure through console-security interest notifications , allowing an app to disclose kernel memory. The fix, described as impr...

CVE-2026-65360

CVE-2026-65360 is a race condition in Apple's operating systems, addressed through improved state handling. The vulnerability allows an app to cause unexpected system termination . The issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Taho...

CVE-2026-84636

Apple addresses an authorization flaw in iOS 27 , iPadOS 27 , tvOS 27 , visionOS 27 , and watchOS 27 through improved state management . The root cause is a state management deficiency in the authorization mechanism, which could allow a third-party app to access sensitive user data . The fix is i...

CVE-2026-84620

CVE-2026-84620 is an integer overflow in Apple's 3D model processing pipeline, remediated with improved input validation. Processing a maliciously crafted 3D model may lead to memory corruption , which in practice could allow code execution or denial of service depending on the context. The vulne...

EUVD-2026-77885

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

CVE-2026-65357

CVE-2026-65357 is a memory handling flaw affecting multiple Apple operating systems. An app may be able to cause unexpected system termination or write kernel memory , indicating a potential integrity risk at the kernel level. The issue was addressed with improved memory handling and is fixed in ...

EUVD-2026-78010

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog may lead to unexpected process...

EUVD-2026-78007

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Opening a maliciously crafted file may lead to unexpected process termination...