CVE-2026-64752

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2026-64752

CVE-2026-64752 is a memory corruption vulnerability (classified as an out-of-bounds write by Rapid7) in CoreMedia , Apple's media processing framework. Processing a maliciously crafted image may lead to arbitrary code execution . Apple addressed the issue by removing the vulnerable code , with fi...

EUVD-2026-78049

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-86887

CVE-2026-86887 is a privacy vulnerability in Apple's iOS, iPadOS, and visionOS where an app may be able to bypass certain Privacy preferences . The root cause was identified as sensitive data not being properly removed , allowing unintended exposure. The fix is included in iOS 26.7, iPadOS 26.7, ...

CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-65358

CVE-2026-65358 is a race condition in Apple operating systems, addressed with improved state handling. The affected platforms and fixed versions are iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 . The impact is that an app may ...

CVE-2026-65358

A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-84571

CVE-2026-84571 is a buffer overflow in Apple's CoreUI framework, addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination , representing a denial-of-service impact rather than code execution. The vulnerability affects iOS 27, iPadOS 27...

EUVD-2026-78045

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to...

CVE-2026-84530

An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

EUVD-2026-78043

An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-84530

CVE-2026-84530 is an information disclosure vulnerability in Apple platforms, fixed in iOS 26.7, iOS 27, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . The issue stems from inadequate memory management , allowing a local application to disclose kernel memory . CISA...

CVE-2026-20683

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

CVE-2026-20683

CVE-2026-20683 is an authentication issue in the Apple Account component, specifically within the Sign In With Apple flow. The root cause was addressed through improved state management . The impact is that a malicious app may be able to leverage the Sign In With Apple authentication flow to acce...

EUVD-2026-78039

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

CVE-2026-84635

CVE-2026-84635 is a logic issue in state management within the WebKit engine. Processing maliciously crafted web content may cause an unexpected process termination (denial of service). The flaw is fixed in Safari 27, iOS/iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 . Lin...

EUVD-2026-78033

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84623

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84623

CVE-2026-84623 is an authorization issue in Apple iOS and iPadOS , addressed with improved state management . The vulnerability allows an app to fingerprint the device , representing a privacy-adjacent impact rather than a direct code-execution or privilege-escalation flaw. It was classified by R...