CVE-2026-65352

CVE-2026-65352 is an information disclosure vulnerability in WebKit affecting Apple's iOS, iPadOS, macOS, and visionOS. The root cause is an improper state management flaw that allows a website to determine a user's IP address even when Private Relay is enabled, undermining a key privacy feature....

CVE-2026-43688

CVE-2026-43688 is a memory corruption vulnerability in Apple products, addressed through improved input validation. It affects iOS 27 , iPadOS 27 , and macOS Golden Gate 27 . Rapid7 classifies it as Improper Restriction of Rendered UI Layers or Frames . The practical consequence is that processin...

CVE-2026-43688

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2026-65344

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2026-65344

CVE-2026-65344 is an out-of-bounds write in Apple's CoreMedia framework. Processing a maliciously crafted video file may lead to unexpected app termination . The issue was addressed with improved bounds checking and is fixed in iOS 26.7 and iPadOS 26.7 , iOS 27 and iPadOS 27 , macOS Golden Gate 2...

EUVD-2026-77985

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app...

CVE-2026-86878

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

EUVD-2026-77984

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-86878

CVE-2026-86878 is a permissions issue in Apple iOS and iPadOS where an app may be able to access sensitive user data . The vulnerability was addressed with additional restrictions and is fixed in iOS 27 and iPadOS 27 , part of Apple's September 2026 security update that addressed multiple vulnera...

CVE-2026-86878

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

EUVD-2026-77982

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86897

CVE-2026-86897 affects the Safe Browsing component of Safari 27 , as well as iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macOS Golden Gate 27 , and visionOS 27 . The vulnerability stems from insufficient entitlement checks , which could allow an app to access sensitive user data . Apple fixed the i...

EUVD-2026-77980

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

CVE-2026-65411

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

CVE-2026-65411

CVE-2026-65411 is a path handling vulnerability in Apple iOS, iPadOS, and visionOS , classified as an improper limitation of a pathname to a restricted directory . The root cause was addressed through improved validation. The impact is that an app may be able to modify protected parts of the file...

CVE-2026-65411

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

EUVD-2026-77979

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27,...

CVE-2026-65407

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27,...

CVE-2026-65391

CVE-2026-65391 is an out-of-bounds write (classified by Rapid7 as an integer overflow/wraparound) in the WebRTC component of WebKit , affecting Safari, iOS/iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to memory corruption . The issue was addresse...

CVE-2026-65407

CVE-2026-65407 is a use-after-free vulnerability in the AppleAVD (Apple Audio Video Device) framework, affecting multiple Apple platforms including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The root cause was a use-after-free condition addressed with improved memory management . The impact...