CVE-2026-84510

CVE-2026-84510 is a heap buffer overflow in Apple's volume-mounting code, addressed with improved bounds checking. Mounting a maliciously crafted volume may lead to unexpected system termination (denial of service). The fix is included in iOS/iPadOS 26.7, iOS/iPadOS 27, macOS Golden Gate 27, macO...

CVE-2026-28968

CVE-2026-28968 is an out-of-bounds write in Apple platforms, addressed with improved bounds checking. It affects iOS 26.7/27, iPadOS 26.7/27, macOS Golden Gate 27, Sequoia 15.8, Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 . An app may cause unexpected system termination or kernel memory corr...

EUVD-2026-77854

A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions...

CVE-2026-84551

CVE-2026-84551 affects Apple's iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . It stems from a logic issue addressed through improved validation, which may allow an app to bypass network restrictions . The NVD-assigned CVSS 3.1 score is 4.4 (Medium) with a local attack ...

CVE-2026-84551

A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions...

CVE-2026-64752

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-64752

CVE-2026-64752 is a memory corruption vulnerability in Apple's CoreMedia framework, disclosed by researcher Nik Tsytsarkin (Meta Red Team X). The fix removes the vulnerable code entirely. Processing a maliciously crafted image may lead to arbitrary code execution . The vulnerability affects iOS 2...

EUVD-2026-78049

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-86887

CVE-2026-86887 is a privacy vulnerability in Apple iOS, iPadOS, and visionOS where an app may be able to bypass certain Privacy preferences. The issue was addressed by removing sensitive data that could be exposed. Apple fixed it in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, and visionOS 27 . The ...

CVE-2026-65358

CVE-2026-65358 is a race condition in Apple's operating systems, addressed with improved state handling . The vulnerability affects iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 . An app may be able to cause unexpected system t...

CVE-2026-65358

A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-84571

CVE-2026-84571 is a buffer overflow in Apple's CoreUI framework, addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination (denial of service). The vulnerability affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and...

EUVD-2026-78045

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to...

EUVD-2026-78043

An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-84530

An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-84530

CVE-2026-84530 is an information disclosure vulnerability in Apple operating systems where an app may be able to disclose kernel memory , caused by insufficient memory management. It affects iOS/iPadOS 26.7 , iOS/iPadOS 27 , macOS Golden Gate 27 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and wa...

CVE-2026-20683

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

EUVD-2026-78039

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

CVE-2026-20683

CVE-2026-20683 is an authentication flaw in Apple's Sign In With Apple flow, affecting iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, and visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account without pr...