CVE-2026-65405

CVE-2026-65405 is a memory initialization issue in Apple products, fixed with improved memory handling. The affected platforms include iOS/iPadOS 26.7 and 27 , macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 , as well as tvOS 27, visionOS 27, and watchOS 27 . The core impact is that an app may...

CVE-2026-65405

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to determine kernel memory layout...

CVE-2026-64717

A race condition in Apple's kernel, addressed with improved state handling, may allow a malicious app to cause unexpected system termination or corrupt kernel memory . The vulnerability requires a local attack with user interaction and high complexity, rated CVSS 6.3 (Medium) . No specific kernel...

EUVD-2026-78113

A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel...

CVE-2026-86895

CVE-2026-86895 is an information disclosure vulnerability in the CloudKit framework affecting iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 . A local app may be able to read a persistent account identifier , enabling user tracking or fingerprinting across apps. The root cause was addres...

CVE-2026-86895

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

EUVD-2026-78111

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

CVE-2026-84607

CVE-2026-84607 is a race condition in Apple's AVEVideoEncoder component (com.apple.driver.AppleAVE2 kernel extension) that may allow a sandboxed app to execute arbitrary code with kernel privileges . Research by Ping-2o identifies the fix as a per-frame state-consistency guard comparing the clien...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-86905

CVE-2026-86905 affects the Authentication Services component across iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 . An app may be able to delete credentials stored in Keychain , representing a high-integrity impact with no confidentiality or availability impact. The root cause was addr...

EUVD-2026-78103

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

EUVD-2026-78102

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84596

CVE-2026-84596 is an out-of-bounds read in Apple's CoreText framework, fixed with improved bounds checking. It affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . Processing a maliciously crafted font may lead to the disclosure of process memory . The CVSS 3.1 ...

CVE-2026-84596

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-84597

CVE-2026-84597 is an out-of-bounds read vulnerability in Apple's FontParser component, addressed with improved input validation. Processing a maliciously crafted font may result in the disclosure of process memory . The issue affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, ...

CVE-2026-84597

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory...

CVE-2026-86904

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

CVE-2026-86904

CVE-2026-86904 is a privacy vulnerability in Apple iOS, iPadOS, and watchOS where an app may be able to track users across apps and websites without permission . The root cause was addressed through improved state management . The fix is available in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, and ...

EUVD-2026-78099

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

CVE-2026-43664

CVE-2026-43664 is a data protection issue in Apple's Accessibility framework, affecting iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and watchOS 27. An app may be able to access sensitive user data ; the fix is described as improve...