CVE-2026-86879

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...

CVE-2026-84518

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...

EUVD-2026-78129

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...

EUVD-2026-78120

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86895

An information disclosure vulnerability in iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 allowed a local app to read a persistent account identifier , caused by insufficient state management. Apple addressed the issue with improved state management in the respective version 27 releases....

EUVD-2026-78111

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

CVE-2026-86905

Apple's Keychain component was vulnerable to a flaw that allowed an app to delete credentials stored within it. The root cause was identified as vulnerable code, which was addressed by its removal. The fix ships in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 . No publicly available e...

EUVD-2026-78103

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

EUVD-2026-78102

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84596

CVE-2026-84596 is an out-of-bounds read in Apple's font processing subsystem, addressed with improved bounds checking . The vulnerability is triggered by processing a maliciously crafted font , which may result in the disclosure of process memory . The issue affects iOS, iPadOS, macOS Golden Gate...

CVE-2026-84597

CVE-2026-84597 is an out-of-bounds read vulnerability in Apple's font processing subsystem, affecting iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . The root cause is insufficient input validation when handling font data, and the fix introduces improved input vali...

CVE-2026-84606

CVE-2026-84606 is a privacy vulnerability in Apple platforms where improved handling of identifiers was required to prevent an app from identifying a user across reinstalls . The issue affects iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , all of which include the fix. The root cause ...

EUVD-2026-77937

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

CVE-2026-64761

CVE-2026-64761 is a privacy vulnerability in iOS and iPadOS prior to version 27. The root cause involves improper handling of user preferences , which allowed an app to potentially identify what other apps a user has installed. This constitutes a privacy leak rather than a traditional code-execut...

CVE-2026-86893

CVE-2026-86893 is a permissions issue in Apple's iOS, iPadOS, tvOS, visionOS, and watchOS (prior to version 27) that may allow an app to read the device name . The issue was addressed with additional restrictions and is fixed in iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 . No CVSS me...

CVE-2026-43785

CVE-2026-43785 is a permissions issue affecting multiple Apple platforms: iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 . An app may be able to modify a file it only had permission to read , meaning a sandboxed app could exceed its intende...

EUVD-2026-77891

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-84600

CVE-2026-84600 is an authorization issue in Apple's Shortcuts feature, addressed through improved state management. A malicious shortcut may be able to send messages without user confirmation. The issue is fixed in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27...

EUVD-2026-77881

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation...

EUVD-2026-77880

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication...