CVE-2026-43808

CVE-2026-43808 is a use-after-free vulnerability in Apple platforms, addressed through improved memory management. The affected operating systems are iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6 , where the issue is fixed. The stated impact is that an app may be able to ca...

CVE-2026-43808

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination...

EUVD-2026-77952

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination...

CVE-2026-43737

CVE-2026-43737 is an authorization flaw in CoreMotion across Apple platforms. A third-party app could access motion data from headphones without user consent, a privacy-sensitive disclosure. Apple addressed it with improved validation, shipping fixes in iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, mac...

CVE-2026-65404

CVE-2026-65404 is an authorization flaw in Apple's Accounts component, where improper state management allowed a malicious application to bypass Privacy preferences . The vulnerability affects iOS 18.7.10, iPadOS 18.7.10, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, and macOS So...

CVE-2026-65404

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences...

EUVD-2026-77946

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences...

CVE-2026-65404

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences...

EUVD-2026-77944

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to...

EUVD-2026-77941

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to cause a denial of service...

CVE-2026-84489

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to cause a denial of service...

CVE-2026-84489

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. An app may be able to cause a denial of service...

CVE-2026-84489

CVE-2026-84489 is a buffer overflow (buffer copy without checking size of input) in Apple's CoreUI framework, a core component of iOS, iPadOS, and macOS. An app may be able to cause a denial of service . The issue was addressed with improved bounds checking and is fixed in iOS 18.7.10 , iPadOS 18...

CVE-2026-64761

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

EUVD-2026-77937

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

CVE-2026-64761

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed...

CVE-2026-64761

CVE-2026-64761 is a privacy vulnerability in the Accessibility framework of Apple iOS 27 and iPadOS 27 . The issue stems from improper handling of user preferences , which could allow an app to identify what other apps a user has installed . The fix is included in iOS 27 and iPadOS 27, affecting ...

CVE-2026-64736

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84630

CVE-2026-84630 is a race condition in Apple platforms addressed with improved state handling. The specific component is not named, but the impact is that an app may be able to cause unexpected system termination . The fix is available across a wide range of Apple OS versions: iOS 26.7 / 27, iPadO...

EUVD-2026-77932

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...