CVE-2026-20611

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing a maliciously crafted media fil...

CVE-2026-20627

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data...

CVE-2026-20627

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data...

CVE-2026-20627

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, visionOS 26.3, watchOS 26.3. An app may be able to access sensitive user data...

CVE-2026-20627

An information disclosure vulnerability exists in the CoreServices component of multiple Apple products, including iOS, iPadOS, macOS (Sequoia, Sonoma, Tahoe), visionOS, and watchOS . The root cause is an issue in the handling of environment variables , which could allow a malicious application t...

CVE-2026-20626

A privilege escalation vulnerability exists in the Kernel of several Apple products, including Apple Vision Pro (all models). The root cause is a logic issue that was addressed with improved checks . A malicious app could exploit this vulnerability to gain root privileges . This issue is fixed in...

CVE-2025-46304

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.4, iOS 18.7.5 and iPadOS 18.7.5, macOS Sonoma 14.8.4. A malicious HID device may cause an unexpected process crash...

CVE-2026-20667

CVE-2026-20667 is a logic‑issue in Apple platforms that could allow an app to break out of its sandbox. It is fixed in iOS/iPadOS 26.3, watchOS 26.3, and macOS updates: Sequoia 15.7.4, Sonoma 14.8.4, Tahoe 26.3. Connected sources confirm the root cause and affected products; exploitation status i...

CVE-2026-20650: Uncontrolled Resource Consumption

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to perform denial-of-service attack using crafted Bluetooth packets...

PT-2026-7755

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.3 iPadOS versions prior to 26.3 macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.3 tvOS versions prior to 26.3 visionOS versions prior to 26.3 watchOS versio...

PT-2026-7765

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 macOS Sonoma versions prior to 14.8.4 macOS Sequoia versions prior to 15.7.4 macOS Tahoe versions prior to 26.3 tvOS versions prior to 26.3 watchOS versions prior to 26.3 visionOS...

PT-2026-7736

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.7.4 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 macOS Sonoma versions prior to 14.8.4 Description A malicious Human Interface Device HID may cause an unexpected process crash due to insufficient boun...

PT-2026-7805

Name of the Vulnerable Software and Affected Versions iOS versions 1.0 through 19.4 iPadOS versions 1.0 through 19.4 macOS versions prior to 15.7.4 watchOS versions prior to 26.3 tvOS versions prior to 26.3 visionOS versions prior to 2.4.1 Description A heap-based memory corruption issue exists i...

PT-2026-7780

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.3 iOS versions prior to 26.3 iPadOS versions prior to 26.3 tvOS versions prior to 26.3 macOS versions prior to Tahoe 26.3 Description A logging issue allowed potential viewing of sensitive user information due to...

CVE-2025-46304: Uncontrolled Resource Consumption

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash...

CVE-2025-46305: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. A malicious HID device may cause an unexpected process crash...

CVE-2026-20655: Improper Authentication

An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-20663: Insertion of Sensitive Information into Log File

The issue was resolved by sanitizing logging. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An app may be able to enumerate a user's installed apps...

CVE-2026-20667: Protection Mechanism Failure

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, watchOS 26.3. An app may be able to break out of its sandbox...

CVE-2026-20671: Improper Neutralization of Special Elements used in a Command

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An attacker in a privileged network position may be able to interce...