EUVD-2026-77992

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-28935

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-28935

CVE-2026-28935 is a kernel memory-handling flaw in Apple platforms. An app may be able to cause unexpected system termination or corrupt kernel memory . The issue was addressed with improved memory handling and is fixed in iOS 26.6.1 , iPadOS 26.6.1 , macOS Sequoia 15.8 , macOS Tahoe 26.6.2 , tvO...

CVE-2026-84625

CVE-2026-84625 is a permissions issue in Apple platforms that was addressed with additional sandbox restrictions , potentially allowing an app to fingerprint the user . The flaw is fixed in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , visionOS 27 , and watchOS 27 . Apple's CVSS 3.1 score is 9.1 (C...

EUVD-2026-77989

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user...

CVE-2026-65352

CVE-2026-65352 is an information disclosure flaw in Apple's Private Relay feature, where a website may be able to determine a user's IP address even with Private Relay enabled. The issue was addressed with improved state management . Fixed versions: iOS 26.6.1 , iPadOS 26.6.1 , macOS Tahoe 26.6.2...

EUVD-2026-77988

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

CVE-2026-43688

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2026-43688

CVE-2026-43688 is a memory corruption vulnerability in Apple iOS 27, iPadOS 27, and macOS Golden Gate 27 , addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination . The flaw scores CVSS 7.8 (High) with a local attack vector requiri...

CVE-2026-65344

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2026-65344

CVE-2026-65344 is an out-of-bounds write in Apple's CoreMedia framework, triggered when processing a maliciously crafted video file , which may lead to unexpected app termination. The fix introduces improved bounds checking. Affected releases include iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macO...

EUVD-2026-77985

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app...

EUVD-2026-77984

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-86878

CVE-2026-86878 is a permissions issue in iOS 27 and iPadOS 27 that allows an app to potentially access sensitive user data . Apple addressed it by applying additional restrictions, as noted in their security update (support.apple.com ). The vulnerability carries a CVSS 3.1 score of 5.5 (Medium) w...

CVE-2026-86878

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

EUVD-2026-77982

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86897

CVE-2026-86897 is an improper access control vulnerability in the Safe Browsing component of Safari (macOS Sequoia and macOS Tahoe). Due to insufficient entitlement checks, an app may be able to access sensitive user data . Apple addressed the issue by adding additional entitlement checks. The fi...

CVE-2026-65411

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

EUVD-2026-77980

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

CVE-2026-65411

CVE-2026-65411 is a path handling vulnerability in Apple's iOS , iPadOS , and visionOS operating systems. An app may be able to modify protected parts of the file system , resulting in a HIGH integrity impact with no confidentiality or availability impact. The root cause is addressed through impr...