CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...

CVE-2026-65403

This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

EUVD-2026-77923

This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-65403

This vulnerability affects multiple Apple operating systems, including iOS , iPadOS , macOS , visionOS , and watchOS . Due to insufficient checks, an application may be able to access sensitive user data . The issue has been resolved in iOS 26.7/27 , iPadOS 26.7/27 , macOS Golden Gate 27 , macOS ...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86893

A permissions issue in the CloudKit component of tvOS 27 and visionOS 27 allowed an app to read the device name . This vulnerability has been addressed by implementing additional restrictions . The fix is included in the release of iOS 27 , iPadOS 27 , tvOS 27 , visionOS 27 , and watchOS 27 . No ...

EUVD-2026-77919

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-84617

An authorization issue exists in multiple Apple operating systems due to improper state management, which could allow an app to access sensitive user data . This vulnerability affects iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , and ...

CVE-2026-84617

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data...

EUVD-2026-77914

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data...

CVE-2026-86903

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-84621

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

EUVD-2026-77910

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-84621

An authorization issue in the searchtoold system daemon on macOS allows an application to access sensitive user data . The vulnerability exists because the daemon, which holds high privileges and TCC access to nearly all data categories, accepted any XPC connection without validation. The issue w...

CVE-2026-65399

A file quarantine bypass vulnerability was identified in the copyfile component of Apple products. This flaw allowed an archive to potentially bypass Gatekeeper protections. The issue was addressed with additional checks and is fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27 , macOS Golden G...

CVE-2026-65399

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

EUVD-2026-77909

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

CVE-2026-28966

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app...

CVE-2026-28966

An out-of-bounds write issue exists in several Apple products, including iOS, iPadOS, macOS, tvOS, and visionOS . The vulnerability is caused by a lack of proper bounds checking and can be triggered by processing a maliciously crafted file , potentially leading to unexpected app termination . Thi...