CVE-2026-43807

The CVE-2026-43807 issue is a buffer overflow in MobileAccessoryUpdater addressed by improved bounds checking. Affected products include iOS 26.5.2 and iPadOS 26.5.2; macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.5.2; tvOS 26.6, visionOS 26.6, and watchOS 26.6. The vulnerability could cause unexp...

CVE-2026-64762

The CVE-2026-64762 entry concerns an out-of-bounds read that was mitigated by improved bounds checking. Public docs confirm fixes in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, addressing the potential for an app to cause unexpected system termination. Affected component deta...

CVE-2026-43780

CVE-2026-43780 affects Apple’s ImageIO component. An integer overflow was addressed via improved input validation, with patches in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Processing a maliciously crafted texture may...

CVE-2026-64735

CVE-2026-64735 affects multiple Apple platforms (iOS 26.6/iPadOS 26.6; macOS Sequoia 15.7.8; Sonoma 14.8.8; Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26.6). Root cause described as an inconsistent user interface issue resolved by improved state management. The issue allows a remote attacker t...

CVE-2026-43714

The CVE-2026-43714 issue affects Apple platforms and is addressed by updates across multiple OS versions. Affected components/targets include iOS and iPadOS, macOS (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6), visionOS, and watchOS, with the root cause described as insufficient input handling that...

CVE-2026-64719

CVE-2026-64719 is an out-of-bounds access issue in WebRTC within WebKit used by Safari/WebKit on macOS Sonoma/Sequoia and iOS/iPadOS/tvOS/visionOS/watchOS. The root cause is improper bounds handling when processing web content, leading to a potential Safari crash. Apple’s security content for Saf...

CVE-2026-64758

CVE-2026-64758 is actively addressed for Apple platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) via improved bounds checks in ImageIO. The issue affects processing a maliciously crafted file and may cause an unexpected app termination. Public details in connected sources (Apple secur...

CVE-2026-43755

Technical details about CVE-2026-43755 (affected products, vulnerable component, root cause, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-43775

CVE-2026-43775 is an authorization issue in macOS components that was addressed by improved state management. Affected products include macOS Sequoia 15.7.8 and macOS Tahoe 26.6, where an app may potentially access sensitive user data due to the underlying flaw. The public documents confirm the f...

CVE-2026-64693

The CVE-2026-64693 issue is a type confusion vulnerability addressed by Apple: improved checks fix the flaw. Affected products/versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. If a device processes a m...

CVE-2026-64739

CVE-2026-64739 is an out-of-bounds write vulnerability in Apple platforms. Affected products include iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Root cause: memory bounds checking deficiency leading to an out-o...

CVE-2026-43763

The CVE-2026-43763 entry concerns a permissions issue in macOS where an app could read files outside its sandbox. Technical details across sources show the vulnerability being mitigated by removing the vulnerable code, with fixes implemented in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS...

CVE-2026-64742

CVE-2026-64742 is tied to Apple platforms where an app could access sensitive user data due to insecure network transmission; the issue is addressed by mandating HTTPS. Apple fixed it in iOS/iPadOS/tvOS/visionOS/watchOS 26.6. The combined sources confirm the vulnerability involved sending informa...

CVE-2026-28981

CVE-2026-28981 is a macOS vulnerability where a buffer overflow in image processing was addressed by improved bounds checking. Affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6; processing a maliciously crafted image may lead to arbitrary code execution. The fix is in the li...

CVE-2026-64703

CVE-2026-64703 is a use-after-free memory issue that Apple fixed by improved memory management. The vulnerability could allow an application to cause a denial-of-service and is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The CVSS 3.1 vector is Network/Low/None for pr...

CVE-2026-43759

CVE-2026-43759 is an authorization issue resolved by improved state management in macOS Tahoe 26.6 and watchOS 26.6. The vulnerability could allow an app to access sensitive user data due to faulty state handling. Root cause: unspecified in detail beyond “authorization issue” and “improved state ...

CVE-2026-64754

CVE-2026-64754 is an out-of-bounds write vulnerability in Apple OS components that is fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue arises from processing a maliciously crafted file and can lead to a de...

CVE-2026-64755

CVE-2026-64755 affects Apple iOS and iPadOS. The issue is described as an authorization problem tied to improved state management that could allow an app to access sensitive user data. The vulnerability is mitigated by updates to iOS 26.6 and iPadOS 26.6. The connected documents corroborate this ...

CVE-2026-43758

CVE-2026-43758 affects macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6 and watchOS 26.6. Description: an authorization issue was addressed via improved state management, reducing the risk that an app could access sensitive user data. Root cause is stated as state-management-related, w...

CVE-2026-64702

CVE-2026-64702 affects macOS sandboxed apps and is described as an access issue that could allow an app to break out of its sandbox. The vulnerability has concrete fixes in macOS updates: Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The NVD entry rates this as a critical issue (CVSS v3.1: 9.8) ...

CVE-2026-64743

CVE-2026-64743 is an authorization issue addressed by Apple with improved state management. The NVD entry specifies that the flaw allows an app to access sensitive user data and is fixed in iOS 26.6 / iPadOS 26.6 / macOS Tahoe 26.6 / tvOS 26.6 / visionOS 26.6 / watchOS 26.6. Core metrics show CVS...

CVE-2026-64692

CVE-2026-64692 is an Apple-ecosystem issue described as an out-of-bounds read that was addressed by improving bounds checking. The vulnerability is fixed in multiple Apple OS updates (iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; ...

CVE-2026-64738

CVE-2026-64738 is a macOS sandboxing permission issue that could allow a malicious app to break out of its sandbox. The vulnerability is addressed by additional restrictions and is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.x (26.6+). The connected advisories describe ...

CVE-2026-43723

CVE-2026-43723 describes a path handling issue fixed by improved input validation. The vulnerability affects Apple platforms and is mitigated by updates to iOS 26.6/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be ...

CVE-2026-43774

The CVE-2026-43774 entry describes an out-of-bounds read that could let an app access sensitive user data. Apple fixed this by improving bounds checking in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. The available sources confirm the affected platforms and the remediation ver...

CVE-2026-43754

Summary: CVE-2026-43754 affects macOS where an app could leak sensitive kernel state. The issue is addressed in macOS updates Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6. The description notes improved redaction of sensitive information as the fix. The connected sources corroborate a macOS-focu...

CVE-2026-64718

CVE-2026-64718 is a use-after-free in WebKit/Safari processing of web content that may crash Safari. The issue is fixed in Safari 26.6 and corresponding OS updates (iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6). Exploitation would require local access with user intera...

CVE-2026-64734

CVE-2026-64734 affects Apple platforms (iOS/iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, visionOS, watchOS 26.6). Root cause: processing a maliciously crafted contact may leak sensitive data; fix implemented via improved checks. Remediation: update to the listed fixed versions (a...

CVE-2026-43781

CVE-2026-43781 is a race-condition vulnerability in macOS Sequoia 15.7.8 and related updates (Sonoma 14.8.8, Tahoe 26.6) affecting the Apple Account area. The issue is described as a race condition addressed with improved state handling, with the impact that an app may be able to gain root privil...

CVE-2026-43806

CVE-2026-43806 is a local-denial-of-service issue addressed by removing the vulnerable code in macOS Tahoe 26.6. The primary sources (NVD/NCSC/CVE lists) indicate a DoS condition that could be triggered by a local attacker, with a CVSS v3.1 base score of 5.5 (Medium) and local attack vector with ...

CVE-2026-64763

CVE-2026-64763 is an Apple vulnerability describing an out-of-bounds write that was mitigated by removing the vulnerable code. Affected products and versions include iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. ...

CVE-2026-43693

CVE-2026-43693 describes a race condition that was addressed through improved state handling. The vulnerability could allow an app to gain root privileges on macOS. Patches are available in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. These updates fix the issue by tightening ...

CVE-2026-43739

CVE-2026-43739 describes an out-of-bounds write vulnerability that Apple fixed by improving bounds checking. Affected platforms include iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. The issue could cause an unexpected system termination; no exploitation deta...

CVE-2026-43810

CVE-2026-43810 involves a memory-handling issue in Apple OS components that could allow a remote user to terminate a system or corrupt kernel memory. The fixed versions are: iOS 26.6 and iPadOS 26.6; macOS Sequoia 15.7.8; macOS Sonoma 14.8.8; macOS Tahoe 26.6; tvOS 26.6; visionOS 26.6; watchOS 26...

CVE-2026-64775

Technical details for CVE-2026-64775 are not publicly provided in the supplied documents; the memory initialization issue and affected Apple OS versions are mentioned, but no exact product/version specifics or remediation are confirmed here. Monitor for updates.

CVE-2026-64722

CVE-2026-64722 is a memory-corruption issue in Apple platforms: a buffer overflow that can cause disclosure of process memory when processing certain 3D models. Affected products/versions are iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6. The root cause is unspecified in th...

CVE-2026-43778

CVE-2026-43778 is a use-after-free issue addressed with improved memory management that can allow an app to terminate the system or corrupt kernel memory. Affected products/versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26....

CVE-2026-43797

CVE-2026-43797 concerns an information-disclosure issue where an app could access a user’s contacts. The CVE description notes the issue was addressed with improved checks and is fixed in Apple updates: iOS 26.6 and iPadOS 26.6, and macOS Tahoe 26.6. The accompanying metrics indicate a CVSS v3.1 ...

CVE-2026-64555

The CVE-2026-64555 entry concerns the Linux kernel KVM for ARM64. The issue arises in kvm_hyp_handle_mops(), where a synthetic vcpu_cpsr value used for nested virtualization is written directly to hardware, bypassing translation for vEL2. This causes an incorrect reset of the single‑step state ma...

CVE-2026-64554

CVE-2026-64554 affects the Linux kernel's Netfilter bridge path. The vulnerability occurs in br_ip6_fragment(), which obtains prevhdr (a pointer into the skb head) from ip6_find_1stfragopt() and then calls skb_checksum_help(). For cloned skbs, skb_checksum_help() reallocates the head via pskb_exp...

CVE-2026-64553

The CVE-2026-64553 entry concerns the Linux kernel net/psample, specifically PSAMPLE_ATTR_DATA. The vulnerability was an information leak caused by open coding in nla_put() that failed to clear padding for netlink attributes, with data_len not necessarily multiple of 4B. The issue affects the psa...

CVE-2026-64551

CVE-2026-64551 concerns the Linux kernel SCTP stack. A vulnerability in the handling of an ERROR chunk with a STALE_COOKIE cause in the COOKIE_ECHOED state can cause an out-of-bounds read: the code reads the 4-byte Measure of Staleness from after the cause header, but the staleness field may not ...

CVE-2026-64552

Summary (CVE-2026-64552) In the Linux kernel virtio-net, receive_big() does a length check against (big_packets_num_skbfrags + 1) * PAGE_SIZE, but a gap remains due to add_recvbuf_big() placing sg[1] after the padded vnet header. A malicious virtio backend can announce a length in that gap, causi...

CVE-2026-64550

The CVE-2026-64550 entry concerns the Linux kernel Qualcomm rmnet component. The vulnerability arises when ingress deaggregation is disabled: rmnet_map_ingress_handler() forwards frames without length validation, causing the MAP header and checksum/trailer to be dereferenced based on on-wire pkt_...

CVE-2026-64548

The CVE-2026-64548 vulnerability affects the Linux kernel’s BPF/sockmap path. A truncation can occur in bpf_msg_push_data when the scatterlist ring is full or nearly full: len (from BPF ARG_ANYTHING) and copy size are both u32, and the code path uses copy + len to compute a page allocation. An at...

CVE-2026-64549

CVE-2026-64549 involves the Linux kernel Bluetooth BPA10x path (bpa10x_setup). The code reads a response from vendor command 0xfc0e as a string using a plain "%s" starting at skb->data + 1, which can read past the end if the device returns a short or unterminated payload. This leads to OOB rea...

CVE-2026-64546

CVE-2026-64546 is a Linux kernel vulnerability in drm/edid that allows a heap out-of-bounds read in drm_parse_tiled_block() when parsing a crafted EDID tiled block. The root cause is casting a DisplayID block to a struct displayid_tiled_block and reading the fixed layout up to tile->topology_i...

CVE-2026-64547

CVE-2026-64547 affects the Linux kernel net1080 USB network driver. The issue arises when an even packet_len is processed by net1080_rx_fixup: it reads the pad byte at skb->data[packet_len] before verifying skb->len, with packet_len only bounded by NC_MAX_PACKET, enabling a malicious NetChi...

CVE-2026-64545

The CVE-2026-64545 issue is in the Linux kernel’s XDP path: xdp_master_redirect() dereferences the result of netdev_master_upper_dev_get_rcu() without checking for NULL. The helper can return NULL when the receiving device has no upper-master adjacency, and a race window during bond slave release...

CVE-2026-64544

CVE-2026-64544 affects the Linux kernel’s crypto: asymmetric_keys path, specifically pefile_digest_pe_contents. The vulnerability arises when calculating the trailing-data hash length as pelen - (hashed_bytes + certs_size); a crafted PE could make the addition overflow the pelen, causing an unsig...