Apple accused of letting fake crypto app steal $1.8 million

Apple's tagline for its App Store says, "The apps you love. From a place you can trust." You might love the apps, but can you trust the store? A federal lawsuit filed in the Northern District of California last week suggests not. Three people have accused Apple of promoting a fake version of the...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the zipx.Unzip process. An attacker can overwrite arbitrary files on macOS APFS by crafting a ZIP archive that exploits Unicode normalization collisions and symlink following, allowing the attacker to control file...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the zipx.Unzip process. An attacker can overwrite arbitrary files on macOS APFS by crafting a ZIP archive that exploits Unicode normalization collisions and symlink following, allowing the attacker to control file...

CVE-2026-13723 Develar's electron-builder allows arbitrary file overwrite

A vulnerability in the zipx.Unzip extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization Collision combined with symlink following behavior. APFS treats certain Unicode equivalent filenames as identical e.g.,...

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

PT-2026-65851

A vulnerability in the zipx.Unzip extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization Collision combined with symlink following behavior. APFS treats certain Unicode equivalent filenames as identical e.g.,...

Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

Arbitrary File Overwrite in Develar app-builder (zipx.Unzip) via Symlink Following on macOS (APFS)

Overview A vulnerability in the zipx.Unzip extraction routine of Develar’s app-builder allows an attacker to overwrite arbitrary files on macOS using Apple File System APFS. The issue arises from a combination of Unicode normalization collisions and unsafe symlink-following behavior. APFS treats...

CVE-2026-13813

An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=508462149...

CVE-2026-13843

An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516869032...

CVE-2026-13918

An use after free flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=509712284...

CVE-2026-14099

An use after free flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513382161...

Vulnerabilities found in Apple iOS and iPadOS

Apple has addressed several vulnerabilities in various versions of iOS and iPadOS. Various memory management errors, such as use-after-free, buffer overflows, out-of-bounds reads and writes, integer overflows, race conditions, and insufficient input validation, have been fixed. These errors can...

CVE-2026-64783

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:25+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 13:18:43+00:00| seen|...

CVE-2026-64775

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:20+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 16:52:14+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 18:00:06+00:00|...

CVE-2026-64774

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:18+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:16+00:00| seen|...

CVE-2026-64772

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:15+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:06+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:18+00:00| seen|...

CVE-2026-64771

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:12+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 16:52:21+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 19:10:06+00:00|...

CVE-2026-64770

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:10+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 16:52:23+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 19:10:04+00:00|...