CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

EUVD-2026-78015

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-84546

CVE-2026-84546 is an out-of-bounds write vulnerability in Apple's 3D model processing component, affecting iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 . Processing a maliciously crafted 3D model may lead ...

EUVD-2026-78010

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog may lead to unexpected process...

EUVD-2026-78009

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86890

Apple iOS and iPadOS are affected by a logic issue addressed through improved checks. An attacker with physical access to a locked device may be able to view sensitive user information . Rapid7 classifies the weakness as Improper Authentication . CISA's SSVC scoring indicates no known exploitatio...

CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-84497

CVE-2026-84497 is a buffer overflow in Apple platforms addressed with improved size validation. The trigger is opening a maliciously crafted file , which may lead to unexpected process termination (denial of service). The vulnerability affects iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden ...

CVE-2026-84602

CVE-2026-84602 is a type confusion issue in Apple platforms, addressed with improved checks. The impact is that a malicious app may cause unexpected system termination . The fix is included in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tv...

CVE-2026-84602

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

EUVD-2026-78006

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-65355

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

EUVD-2026-78003

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

CVE-2026-65355

CVE-2026-65355 is an information disclosure vulnerability in Apple's Authentication Services component, affecting iOS 18.7.10, iPadOS 18.7.10, iOS 26.6.1, iPadOS 26.6.1, macOS Tahoe 26.6.2, and visionOS 26.6.1 . The root cause was addressed with improved state management . The practical impact is...

CVE-2026-84598

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files...

CVE-2026-84598

CVE-2026-84598 is a path traversal vulnerability in Apple iOS and iPadOS , caused by insufficient path validation. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files . The issue is fixed in iOS 26.7 , iPadOS 26.7 , iOS 27 , and iPadOS 27 . CISA...

CVE-2026-84598

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files...

CVE-2026-84593

CVE-2026-84593 is a use-after-free vulnerability in the AppleKeyStore component of iOS 27 and iPadOS 27 , affecting iPhone 11 and later, and several iPad models. An app may be able to cause unexpected system termination (denial of service). The issue was addressed with improved memory management ...

EUVD-2026-78001

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files...