CVE-2026-65345

CVE-2026-65345 is a permissions issue in Apple's iOS, iPadOS, and macOS, where an app may be able to access user-sensitive data due to insufficient access restrictions. The issue was addressed with additional restrictions. Affected versions are fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS 27...

CVE-2026-84583

CVE-2026-84583 affects Apple's AuthKit component across multiple platforms. A permissions issue allowed a local app to read a persistent account identifier , a privacy-relevant information disclosure. The flaw was resolved through additional restrictions in iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27,...

CVE-2026-84612

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to read persistent device identifiers...

EUVD-2026-77960

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to read persistent device identifiers...

CVE-2026-84612

CVE-2026-84612 is an authorization issue in Apple's DeviceCheck framework, fixed via improved access control across iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. The flaw allows an app to read persistent d...

CVE-2026-84491

CVE-2026-84491 is a permissions issue in Apple platforms, fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . An app may be able to access sensitive user data due to insufficient access restrictions. The CVSS 3.1 score is 5.5 (Medium) wi...

EUVD-2026-77958

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

EUVD-2026-77957

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

EUVD-2026-77955

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data...

CVE-2026-65353

CVE-2026-65353 is an authorization flaw in Apple's Apple Account component affecting iOS 26.6 , iPadOS 26.6 , and macOS Tahoe 26.6 (iPhone 11 and later, various iPad models, and macOS Tahoe). The root cause was addressed through improved state management , preventing an app from accessing sensiti...

CVE-2026-65353

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6. An app may be able to access sensitive user data...

EUVD-2026-77954

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. A sandboxed app may be able to access restricted files...

CVE-2026-84624

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. A sandboxed app may be able to access restricted files...

CVE-2026-84624

CVE-2026-84624 is a permissions issue in CoreML (Apple's Core Machine Learning framework) where a sandboxed app may be able to access restricted files due to insufficient path validation. The flaw is rated CVSS 5.5 (Medium) with a local attack vector, no required privileges, and user interaction ...

CVE-2026-84632

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption...

EUVD-2026-78095

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption...

CVE-2026-84560

CVE-2026-84560 is an authorization flaw in the Bluetooth subsystem of Apple's operating systems, addressed through improved state management. A local app with low privileges may gain unauthorized access to Bluetooth , with high integrity impact and low confidentiality impact (CVSS 6.1, MEDIUM). T...

CVE-2026-84560

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth...

EUVD-2026-78094

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth...