39029 matches found
CVE-2026-65344
CVE-2026-65344 is an out-of-bounds write in Apple's CoreMedia framework, triggered when processing a maliciously crafted video file , which may lead to unexpected app termination. The fix introduces improved bounds checking. Affected releases include iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macO...
EUVD-2026-77985
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app...
EUVD-2026-77984
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...
CVE-2026-86878
CVE-2026-86878 is a permissions issue in iOS 27 and iPadOS 27 that allows an app to potentially access sensitive user data . Apple addressed it by applying additional restrictions, as noted in their security update (support.apple.com ). The vulnerability carries a CVSS 3.1 score of 5.5 (Medium) w...
CVE-2026-86878
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...
EUVD-2026-77982
This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data...
CVE-2026-86897
CVE-2026-86897 is an improper access control vulnerability in the Safe Browsing component of Safari (macOS Sequoia and macOS Tahoe). Due to insufficient entitlement checks, an app may be able to access sensitive user data . Apple addressed the issue by adding additional entitlement checks. The fi...
EUVD-2026-77980
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...
CVE-2026-65411
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...
CVE-2026-65411
CVE-2026-65411 is a path handling vulnerability in Apple's iOS , iPadOS , and visionOS operating systems. An app may be able to modify protected parts of the file system , resulting in a HIGH integrity impact with no confidentiality or availability impact. The root cause is addressed through impr...
CVE-2026-65391
CVE-2026-65391 is an out-of-bounds write in Apple's WebKit WebRTC component, tracked as WebKit Bugzilla 322761 . Processing maliciously crafted web content may lead to memory corruption . The issue was fixed with improved bounds checking in Safari 26.6.1 , iOS/iPadOS 26.6.1 , macOS Tahoe 26.6.2 ,...
EUVD-2026-77979
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27,...
CVE-2026-65391
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption...
CVE-2026-65407
CVE-2026-65407 is a use-after-free vulnerability in the AppleAVD component across Apple's operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS). The flaw was addressed with improved memory management . The impact is that an app may cause unexpected system termination (denial of service)...
CVE-2026-86881
CVE-2026-86881 is a certificate validation flaw in Apple platforms where an attacker with a compromised intermediate certificate authority may issue certificates with arbitrary extended key usages , potentially enabling unauthorized access to sensitive data or man-in-the-middle attacks. The issue...
CVE-2026-86881
A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...
EUVD-2026-77977
A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...
CVE-2026-84629
CVE-2026-84629 affects iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 , where a missing entitlement check allows an app to fingerprint the user . The fix introduces additional entitlement checks. The CVSS 3.1 score is 7.5 (High) with a network attack vector requiring no user interaction ...