CVE-2026-65403

This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

EUVD-2026-77923

This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-65403

CVE-2026-65403 is an improper access control vulnerability in Apple platforms that may allow an app to access sensitive user data . The issue was addressed with improved checks and is fixed in iOS 26.7 / iPadOS 26.7, iOS 27 / iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, ...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86893

CVE-2026-86893 is a permissions issue in the CloudKit framework affecting iOS 27, iPadOS 27, tvOS 27, visionOS 27, and watchOS 27 . The specific impact is that an app may be able to read the device name , which constitutes a privacy disclosure. Apple addressed the issue with additional restrictio...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

EUVD-2026-77919

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-84617

CVE-2026-84617 is an authorization vulnerability in Apple platforms, addressed through improved state management . The affected products span iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , and tvOS 27 . The stated impact is that an app...

EUVD-2026-77914

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data...

CVE-2026-84617

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data...

CVE-2026-86903

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-84621

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-84621

CVE-2026-84621 is an authorization flaw in Apple's searchtoold , a highly privileged system daemon with TCC (Transparency, Consent, and Control) access to almost every data category. The root cause is that searchtoold accepted any XPC connection with zero validation , allowing a malicious app to ...

EUVD-2026-77910

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-65399

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

CVE-2026-65399

CVE-2026-65399 is a file quarantine bypass in the copyfile component across Apple platforms. An archive may be able to bypass Gatekeeper , Apple's mechanism for blocking untrusted software, by exploiting a gap in quarantine attribute handling during file copy operations. The issue was addressed w...

EUVD-2026-77909

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

CVE-2026-28966

CVE-2026-28966 is an out-of-bounds write in Apple platforms, fixed via improved bounds checking . The specific affected component is not identified in the provided documents, but the attack vector involves processing a maliciously crafted file , which may lead to unexpected app termination . The ...

CVE-2026-28966

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app...

CVE-2026-65360

CVE-2026-65360 is a race condition in Apple's operating systems, addressed with improved state handling . The flaw allows an app to cause unexpected system termination (denial of service). It affects iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26....