Vulnerabilities

TI-2026-80724 CVE-2026-86972 · GHSA-rm9f-v97j-7v5x

Buffer overflow in Apple audio file processing across Apple platforms

LOW 35

A buffer overflow was addressed with improved size validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.002 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-120

TI-2026-80721 CVE-2026-86964 · GHSA-7x27-f9xh-jfqp

Null pointer dereference in Apple OS lets apps crash the system

LOW 24

A null pointer dereference was addressed with improved input validation.

CVSS — EPSS 0.00602 Published 2026-10-26 Fixed in 27, 26.7.2

TI-2026-80895 CVE-2026-113904 · GHSA-vpcx-m956-4636

Use-after-free in Apple Safari and other Apple platforms

LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00559 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80871 CVE-2026-112682 · GHSA-6x5g-j62f-383c

Improper input validation in Apple iOS, macOS, visionOS and watchOS

MEDIUM 40

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00693 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-20

TI-2026-80690 CVE-2026-65385 · GHSA-pq7g-wf29-6rfj

Out-of-bounds write in Apple iOS, iPadOS, visionOS and watchOS

LOW 35

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00205 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-787

TI-2026-80762 CVE-2026-112476 · GHSA-28jf-mf9w-g6mh

Out-of-bounds read in Apple platforms lets apps terminate the system

MEDIUM 40

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80890 CVE-2026-113898 · GHSA-vvfg-466j-3mgw

Apple logging issue lets malicious app bypass Privacy preferences

LOW 15

A logging issue was addressed with improved data redaction.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00169 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-532

TI-2026-80687 CVE-2026-65350 · GHSA-mc9c-9j3p-r5j9

Use-after-free in Apple OS lets apps corrupt kernel memory

LOW 31

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00201 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-416

TI-2026-80853 CVE-2026-112637 · GHSA-rw62-8h24-2hp5

Use-after-free in Apple Safari and iOS enables code execution

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80763 CVE-2026-112477 · GHSA-gxh4-34wg-6vhp

Race condition in Apple OS kernel lets apps corrupt kernel memory

LOW 32

A race condition was addressed with improved locking.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00128 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-362

TI-2026-80854 CVE-2026-112640 · GHSA-h2w3-pjjm-m26w

Use-after-free in Apple Safari and other Apple platforms

LOW 39

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00375 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80860 CVE-2026-112656 · GHSA-cmgv-p2mr-mhr2

Out-of-bounds read in Apple font processing leaks process memory

LOW 15

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00175 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80755 CVE-2026-112466 · GHSA-332g-qg52-h7gh

Out-of-bounds read in Apple OS lets apps read kernel memory

LOW 30

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00171 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80759 CVE-2026-112470 · GHSA-8jr6-rh4r-jrjf

Out-of-bounds write in Apple systems lets apps corrupt kernel memory

LOW 35

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00184 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-787

TI-2026-80846 CVE-2026-112626 · GHSA-7654-wwjr-26xv

Use-after-free in Apple Safari and Apple operating systems

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00575 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80719 CVE-2026-86954 · GHSA-9x79-wp23-pccw

Out-of-bounds read in Apple OS crashes apps when processing images

LOW 24

An out-of-bounds read was addressed with improved bounds checking.

CVSS — EPSS 0.00545 Published 2026-10-26 Fixed in 26.7.2, 27 +1

TI-2026-80834 CVE-2026-112606 · GHSA-p73j-9824-jfwh

Apple OS type confusion flaw can cause unexpected system termination

LOW 39

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00521 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-843

TI-2026-80786 CVE-2026-112515 · GHSA-67qc-4h83-jhjx

Out-of-bounds read in Apple operating systems can crash devices

MEDIUM 40

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-125

TI-2026-80873 CVE-2026-112684 · GHSA-98v5-mvgm-cg7w

Apple Safari and iOS web content flaw causes unexpected process crash

LOW 20

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00432 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-703

TI-2026-80881 CVE-2026-112692 · GHSA-9qw8-p7pq-6jqx

Missing authorization in Apple iOS lets apps access sensitive user data

LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00158 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80747 CVE-2026-112446 · GHSA-wpj9-2hg2-h3g5

Missing authorization in Apple iOS, macOS, tvOS, visionOS and watchOS

LOW 33

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00391 Published 2026-10-26 Fixed in 27.2, 15.8 +2 CWE-862

TI-2026-80874 CVE-2026-112685 · GHSA-pjvx-qq56-vgxm

Missing authorization in Apple operating systems exposes user data

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00167 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80785 CVE-2026-112514 · GHSA-qvf7-gcfc-9v5x

Use-after-free in Apple iOS, iPadOS, macOS and other systems

MEDIUM 48

A use-after-free issue was addressed with improved memory management.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00684 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-416

TI-2026-80901 CVE-2026-113915 · GHSA-89q6-7vgh-m355

Race condition in Apple operating systems exposes sensitive user data

LOW 20

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00124 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-362

TI-2026-80830 CVE-2026-112596 · GHSA-cjm4-6q78-6cq7

Integer overflow in Apple video processing can crash systems

LOW 24

An integer overflow was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2026-10-26 Fixed in 27.2 CWE-190

Vulnerabilities

Filters