EUVD-2026-77937

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

CVE-2026-64761

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

CVE-2026-64761

CVE-2026-64761 affects the Accessibility component of iOS and iPadOS , specifically devices from iPhone 11 and later through various iPad models. The root cause is a privacy issue in the handling of user preferences , which allows an app to identify what other apps a user has installed. The vulne...

CVE-2026-64736

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84630

CVE-2026-84630 is a race condition in Apple's operating systems, addressed with improved state handling. The affected products include iOS 26.7 and iPadOS 26.7 , iOS 27 and iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and watchOS 27 . An app m...

EUVD-2026-77932

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

CVE-2026-65371

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-65371

CVE-2026-65371 is a kernel virtual address (KVA) disclosure of gRegistryRoot through console-security interest notifications in Apple's kernel. A local app with low privileges can leverage this to disclose sensitive kernel memory, potentially aiding further exploitation. The issue was fixed with ...

CVE-2026-65408

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

EUVD-2026-77929

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-65408

CVE-2026-65408 is an integer overflow in the Apple Neural Engine framework, addressed with improved input validation. An app may be able to cause unexpected system termination . The vulnerability affects iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , and...

EUVD-2026-77927

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-84626

CVE-2026-84626 is an information disclosure vulnerability in Apple's operating systems, addressed through improved state management . The concrete impact is that a local application may be able to identify what other apps a user has installed , representing a privacy concern rather than a direct ...

CVE-2026-84626

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-86924

CVE-2026-86924 is a memory corruption vulnerability in Apple platforms, addressed through improved input validation . The trigger is connecting a malicious accessory , which may cause unexpected system termination (denial of service). It affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

EUVD-2026-77926

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-86885

CVE-2026-86885 is an input validation flaw in iOS 27 and iPadOS 27 that an attacker within radio range can exploit without privileges or user interaction to cause unexpected system termination (denial of service). The CVSS 3.1 score is 6.5 (MEDIUM) , with a vector of AV:A/AC:L/PR:N/UI:N/S:U/C:N/I...