CVE-2026-65391

CVE-2026-65391 is an out-of-bounds write (classified by Rapid7 as an integer overflow/wraparound) in the WebRTC component of WebKit , affecting Safari, iOS/iPadOS, macOS, tvOS, visionOS, and watchOS. Processing maliciously crafted web content may lead to memory corruption . The issue was addresse...

CVE-2026-65407

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27,...

CVE-2026-65391

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption...

CVE-2026-65407

CVE-2026-65407 is a use-after-free vulnerability in the AppleAVD (Apple Audio Video Device) framework, affecting multiple Apple platforms including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The root cause was a use-after-free condition addressed with improved memory management . The impact...

CVE-2026-86881

CVE-2026-86881 is a certificate validation flaw in Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS, watchOS). An attacker with a compromised intermediate certificate authority could issue certificates carrying arbitrary extended key usages , potentially enabling unauthorized trust. CISA's SSV...

CVE-2026-86881

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

EUVD-2026-77977

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

CVE-2026-84629

CVE-2026-84629 is an information disclosure vulnerability in Apple iOS, iPadOS, tvOS, visionOS, and watchOS prior to version 27. The root cause is a missing entitlement check , which allows an app to fingerprint the user . The issue was resolved by adding additional entitlement checks in the iOS ...

CVE-2026-84629

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user...

EUVD-2026-77976

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user...

CVE-2026-84628

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...

CVE-2026-84628

CVE-2026-84628 is an authorization issue in Apple platforms, addressed through improved state management . The vulnerability allows a sandboxed app to access the System Keychain , effectively bypassing sandbox restrictions and potentially exposing sensitive credentials. It affects iOS 27, iPadOS ...

EUVD-2026-77974

An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption...

EUVD-2026-77972

A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-65406

A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-64714

CVE-2026-64714 is a memory corruption vulnerability in Apple's ImageIO framework, caused by improper bounds checking. Processing a maliciously crafted image can lead to a denial-of-service . The issue is fixed in iOS 18.7.10 , iPadOS 18.7.10 , macOS Golden Gate 27 , macOS Sequoia 15.7.8 , and mac...

EUVD-2026-77969

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service...

CVE-2026-64714

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted image may lead to a denial-of-service...

EUVD-2026-77968

The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-65410

CVE-2026-65410 is a vulnerability in Apple's AVEVideoEncoder component, present across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The issue was addressed with improved checks , though no further root-cause detail is provided. The impact is that an app may be able to cause unexpected system ...