Vulnerabilities

TI-2026-80710 CVE-2026-86925 · GHSA-x7m3-pq75-cpm9

Missing authorization in Apple iOS, macOS, and visionOS exposes user data

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80705 CVE-2026-84627 · GHSA-8pf5-rg67-4968

Apple iOS, macOS and visionOS buffer overflow from a crafted image

LOW 33

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00202 Published 2026-10-26 Fixed in 26.7.2, 27 +1 CWE-787

TI-2026-80724 CVE-2026-86972 · GHSA-rm9f-v97j-7v5x

Buffer overflow in Apple audio file processing across Apple platforms

LOW 35

A buffer overflow was addressed with improved size validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.002 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-120

TI-2026-80898 CVE-2026-113912 · GHSA-jmq9-px9w-jqm7

Out-of-bounds access in Apple media handling can crash apps

LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2026-10-26 Fixed in 26.7, 27.2 +2 CWE-125

TI-2026-80721 CVE-2026-86964 · GHSA-7x27-f9xh-jfqp

Null pointer dereference in Apple OS lets apps crash the system

LOW 24

A null pointer dereference was addressed with improved input validation.

CVSS — EPSS 0.00602 Published 2026-10-26 Fixed in 27, 26.7.2

TI-2026-80895 CVE-2026-113904 · GHSA-vpcx-m956-4636

Use-after-free in Apple Safari and other Apple platforms

LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00559 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80841 CVE-2026-112616 · GHSA-hc3w-hc48-f2w6

Missing authorization in Apple iOS, iPadOS, macOS and visionOS

LOW 24

An authorization issue was addressed with improved access control.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00155 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80871 CVE-2026-112682 · GHSA-6x5g-j62f-383c

Improper input validation in Apple iOS, macOS, visionOS and watchOS

MEDIUM 40

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00693 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-20

TI-2026-80735 CVE-2026-112417 · GHSA-59gp-5p9g-4mrh

Integer overflow in Apple visionOS enables memory corruption

LOW 35

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2026-10-26 Fixed in 27.2 CWE-190

TI-2026-80914 CVE-2026-113949 · GHSA-h4jf-37wg-wvvw

Type confusion in Apple Safari and iOS allows memory corruption

MEDIUM 40

A type confusion issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-843

TI-2026-80731 CVE-2026-86991 · GHSA-vw4g-5gw4-8g5h

Buffer overflow in Apple iOS, macOS and visionOS crashes processes

MEDIUM 40

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00775 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-120

TI-2026-80690 CVE-2026-65385 · GHSA-pq7g-wf29-6rfj

Out-of-bounds write in Apple iOS, iPadOS, visionOS and watchOS

LOW 35

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00205 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-787

TI-2026-80722 CVE-2026-86968 · GHSA-v478-wrgc-pxv8

Improper access control in Apple iOS, iPadOS, macOS and visionOS

MEDIUM 40

An access issue was addressed with improved access control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2026-10-26 Fixed in 27.2 CWE-284

TI-2026-80762 CVE-2026-112476 · GHSA-28jf-mf9w-g6mh

Out-of-bounds read in Apple platforms lets apps terminate the system

MEDIUM 40

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80890 CVE-2026-113898 · GHSA-vvfg-466j-3mgw

Apple logging issue lets malicious app bypass Privacy preferences

LOW 15

A logging issue was addressed with improved data redaction.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00169 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-532

TI-2026-80687 CVE-2026-65350 · GHSA-mc9c-9j3p-r5j9

Use-after-free in Apple OS lets apps corrupt kernel memory

LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00201 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-416

TI-2026-80843 CVE-2026-112620 · GHSA-p2pf-744h-vrx3

Improper input validation in Apple operating systems enables denial of service

MEDIUM 40

A denial-of-service issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2026-10-26 Fixed in 27.2 CWE-20

TI-2026-80844 CVE-2026-112621 · GHSA-gm78-c22r-w3hm

Out-of-bounds write in Apple Safari and iOS via crafted images

MEDIUM 40

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-787

TI-2026-80869 CVE-2026-112676 · GHSA-c599-33x9-73xg

Apple iOS, macOS and visionOS flaw lets apps read Photos Library

MEDIUM 40

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0057 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-862

TI-2026-80885 CVE-2026-112699 · GHSA-qmp8-4cr5-p2rm

Out-of-bounds read in Apple Safari and iOS exposes process memory

LOW 29

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00404 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-125

TI-2026-80861 CVE-2026-112660 · GHSA-wgmr-65hv-p2jw

Authorization flaw in Apple platforms lets apps bypass privacy

LOW 15

An authorization issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00157 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-863

TI-2026-80853 CVE-2026-112637 · GHSA-rw62-8h24-2hp5

Use-after-free in Apple Safari and iOS enables code execution

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80823 CVE-2026-112565 · GHSA-4389-vpjg-j5x3

Integer overflow in Apple iOS, macOS and visionOS corrupts memory

MEDIUM 40

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00672 Published 2026-10-26 Fixed in 26.7, 27.2 +2 CWE-190

TI-2026-80763 CVE-2026-112477 · GHSA-gxh4-34wg-6vhp

Race condition in Apple OS kernel lets apps corrupt kernel memory

LOW 32

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00128 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-362

TI-2026-80728 CVE-2026-86986 · GHSA-33fx-h4x2-8pcr

Use-after-free in Apple Safari lets crafted web content crash it

LOW 39

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00497 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

Vulnerabilities

Filters