Vulnerabilities

TI-2026-80724 CVE-2026-86972 · GHSA-rm9f-v97j-7v5x

Buffer overflow in Apple audio file processing across Apple platforms

LOW 35

A buffer overflow was addressed with improved size validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.002 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-120

TI-2026-80898 CVE-2026-113912 · GHSA-jmq9-px9w-jqm7

Out-of-bounds access in Apple media handling can crash apps

LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2026-10-26 Fixed in 26.7, 27.2 +2 CWE-125

TI-2026-80721 CVE-2026-86964 · GHSA-7x27-f9xh-jfqp

Null pointer dereference in Apple OS lets apps crash the system

LOW 24

A null pointer dereference was addressed with improved input validation.

CVSS — EPSS 0.00602 Published 2026-10-26 Fixed in 27, 26.7.2

TI-2026-80895 CVE-2026-113904 · GHSA-vpcx-m956-4636

Use-after-free in Apple Safari and other Apple platforms

LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00559 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80762 CVE-2026-112476 · GHSA-28jf-mf9w-g6mh

Out-of-bounds read in Apple platforms lets apps terminate the system

MEDIUM 40

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80890 CVE-2026-113898 · GHSA-vvfg-466j-3mgw

Apple logging issue lets malicious app bypass Privacy preferences

LOW 15

A logging issue was addressed with improved data redaction.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00169 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-532

TI-2026-80687 CVE-2026-65350 · GHSA-mc9c-9j3p-r5j9

Use-after-free in Apple OS lets apps corrupt kernel memory

LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00201 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-416

TI-2026-80843 CVE-2026-112620 · GHSA-p2pf-744h-vrx3

Improper input validation in Apple operating systems enables denial of service

MEDIUM 40

A denial-of-service issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2026-10-26 Fixed in 27.2 CWE-20

TI-2026-80853 CVE-2026-112637 · GHSA-rw62-8h24-2hp5

Use-after-free in Apple Safari and iOS enables code execution

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80763 CVE-2026-112477 · GHSA-gxh4-34wg-6vhp

Race condition in Apple OS kernel lets apps corrupt kernel memory

LOW 32

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00128 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-362

TI-2026-80734 CVE-2026-112416 · GHSA-2hpm-fccr-9vqm

Out-of-bounds write in Apple platforms lets crafted video crash apps

LOW 24

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00183 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-787

TI-2026-80888 CVE-2026-112705 · GHSA-m3pr-h6q6-vvgg

Out-of-bounds write in Apple iOS, iPadOS, macOS and tvOS

LOW 24

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00172 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-787

TI-2026-80854 CVE-2026-112640 · GHSA-h2w3-pjjm-m26w

Use-after-free in Apple Safari and other Apple platforms

LOW 39

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00375 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80860 CVE-2026-112656 · GHSA-cmgv-p2mr-mhr2

Out-of-bounds read in Apple font processing leaks process memory

LOW 15

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00175 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80727 CVE-2026-86978 · GHSA-jxqx-3886-8hgm

Improper checks in Apple iOS, iPadOS, macOS and tvOS expose user data

LOW 15

This issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00196 Published 2026-10-26 Fixed in 27.2 CWE-200

TI-2026-80755 CVE-2026-112466 · GHSA-332g-qg52-h7gh

Out-of-bounds read in Apple OS lets apps read kernel memory

LOW 30

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00171 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80759 CVE-2026-112470 · GHSA-8jr6-rh4r-jrjf

Out-of-bounds write in Apple systems lets apps corrupt kernel memory

LOW 35

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00184 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-787

TI-2026-80846 CVE-2026-112626 · GHSA-7654-wwjr-26xv

Use-after-free in Apple Safari and Apple operating systems

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00575 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80719 CVE-2026-86954 · GHSA-9x79-wp23-pccw

Out-of-bounds read in Apple OS crashes apps when processing images

LOW 24

An out-of-bounds read was addressed with improved bounds checking.

CVSS — EPSS 0.00545 Published 2026-10-26 Fixed in 26.7.2, 27 +1

TI-2026-80767 CVE-2026-112485 · GHSA-83wm-5hhw-j54m

Memory corruption in Apple operating systems from crafted 3D models

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2026-10-26 Fixed in 27.2, 15.8.2 +1 CWE-787

TI-2026-80834 CVE-2026-112606 · GHSA-p73j-9824-jfwh

Apple OS type confusion flaw can cause unexpected system termination

LOW 39

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-843

TI-2026-80786 CVE-2026-112515 · GHSA-67qc-4h83-jhjx

Out-of-bounds read in Apple operating systems can crash devices

MEDIUM 40

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80873 CVE-2026-112684 · GHSA-98v5-mvgm-cg7w

Apple Safari and iOS web content flaw causes unexpected process crash

LOW 20

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00432 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-703

TI-2026-80881 CVE-2026-112692 · GHSA-9qw8-p7pq-6jqx

Missing authorization in Apple iOS lets apps access sensitive user data

LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00158 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80747 CVE-2026-112446 · GHSA-wpj9-2hg2-h3g5

Missing authorization in Apple iOS, macOS, tvOS, visionOS and watchOS

LOW 33

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00391 Published 2026-10-26 Fixed in 27.2, 15.8 +2 CWE-862

Vulnerabilities

Filters