CVE-2026-65410

CVE-2026-65410 is a vulnerability in Apple's AVEVideoEncoder component, present across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The issue was addressed with improved checks , though no further root-cause detail is provided. The impact is that an app may be able to cause unexpected system ...

CVE-2026-86879

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...

EUVD-2026-77966

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...

CVE-2026-86879

CVE-2026-86879 is a denial-of-service vulnerability in Apple iOS and iPadOS , caused by improper input validation . A remote attacker may be able to trigger a DoS condition. The issue is fixed in iOS 27 and iPadOS 27 , as part of Apple's September 2026 security update, which also addressed a broa...

CVE-2026-86879

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...

CVE-2026-28938

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user...

EUVD-2026-77964

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user...

CVE-2026-28938

CVE-2026-28938 is a privacy vulnerability in iOS 26.6 and iPadOS 26.6 where an app may be able to fingerprint the user through access to sensitive data. The root cause involved sensitive data being exposed in a location accessible to applications, and Apple addressed it by moving that data to a l...

CVE-2026-28938

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user...

CVE-2026-43762

CVE-2026-43762 affects iOS, iPadOS, macOS Tahoe, and visionOS , where an app may be able to access user-sensitive data due to insufficient access control checks. The issue was addressed with improved checks and is fixed in version 26.6 of each respective platform. Rapid7 classifies the vulnerabil...

CVE-2026-43762

The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data...

EUVD-2026-77962

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-65345

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data...

CVE-2026-65345

CVE-2026-65345 is a permissions issue in Apple platforms, addressed with additional restrictions. The vulnerability allows an app to access user-sensitive data . It is part of Apple's broader September 2026 security updates, which also address heap-based buffer overflows, use-after-free errors, p...

CVE-2026-84583

CVE-2026-84583 is a permissions issue in Apple's AuthKit component that allows a local app to read a persistent account identifier . The fix adds additional restrictions to limit this access. Affected platforms include iOS 26.7 / 27 , iPadOS 26.7 / 27 , macOS Sequoia 15.8 / Tahoe 26.7 / Golden Ga...

CVE-2026-84583

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

CVE-2026-84612

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to read persistent device identifiers...

CVE-2026-84612

CVE-2026-84612 is an authorization issue in Apple's DeviceCheck component that allows an app to read persistent device identifiers . The flaw was addressed with improved access control and is fixed across iOS 26.7/iPadOS 26.7, iOS 27/iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Taho...

EUVD-2026-77960

An authorization issue was addressed with improved access control. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to read persistent device identifiers...

CVE-2026-84491

CVE-2026-84491 is a permissions (improper access control) issue in Apple's operating systems. A malicious app may be able to access sensitive user data on affected systems. The issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 ....