CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

CVE-2026-65371

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory...

CVE-2026-65371

CVE-2026-65371 is an Apple kernel memory disclosure vulnerability affecting iOS 26.6, iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The root cause is a gRegistryRoot KVA (Kernel Virtual Address) disclosure through console-security interest notifica...

CVE-2026-65408

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

EUVD-2026-77929

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-65408

CVE-2026-65408 is an integer overflow in the Apple Neural Engine framework, addressed with improved input validation. The impact is that an app may be able to cause unexpected system termination . It affects Apple silicon Macs (MacBook Neo 2026, MacBook Air/Pro 2020+, iMac 2021+, Mac mini 2020+, ...

CVE-2026-84626

CVE-2026-84626 is an information disclosure vulnerability in Apple's operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) where an app may be able to identify what other apps a user has installed . The root cause is a state management issue, addressed with improved state management in ...

EUVD-2026-77927

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-84626

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-86924

CVE-2026-86924 is a memory corruption vulnerability in Apple platforms (iOS, iPadOS, and macOS) caused by insufficient input validation when processing accessory data. The trigger requires connecting a malicious accessory , which may cause unexpected system termination (denial of service). The is...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

EUVD-2026-77926

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-86885

CVE-2026-86885 is an input validation flaw in Apple iOS 27 and iPadOS 27 . An attacker within radio range may trigger unexpected system termination , resulting in a denial-of-service condition. The specific component or subsystem affected is not identified in the provided documents. The issue was...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

EUVD-2026-77925

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...

CVE-2026-65395

CVE-2026-65395 is an out-of-bounds write vulnerability in multiple Apple operating systems, triggered by processing a maliciously crafted image , which may result in memory corruption . The fix involves improved bounds checking and is available in iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Gol...