Vulnerabilities

TI-2026-80710 CVE-2026-86925 · GHSA-x7m3-pq75-cpm9

Missing authorization in Apple iOS, macOS, and visionOS exposes user data

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80841 CVE-2026-112616 · GHSA-hc3w-hc48-f2w6

Missing authorization in Apple iOS, iPadOS, macOS and visionOS

LOW 24

An authorization issue was addressed with improved access control.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00155 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80896 CVE-2026-113908 · GHSA-wmmx-cg4v-m24v

Sensitive data exposure in Apple iOS and iPadOS

LOW 24

A privacy issue was addressed by removing sensitive data.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00134 Published 2026-10-26 Fixed in 27.2 CWE-200

TI-2026-80722 CVE-2026-86968 · GHSA-v478-wrgc-pxv8

Improper access control in Apple iOS, iPadOS, macOS and visionOS

MEDIUM 40

An access issue was addressed with improved access control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2026-10-26 Fixed in 27.2 CWE-284

TI-2026-80729 CVE-2026-86987 · GHSA-qjxm-g35g-qp59

Missing authorization in Apple iOS and iPadOS exposes user data

LOW 24

An authorization issue was addressed with improved entitlement checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00155 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80843 CVE-2026-112620 · GHSA-p2pf-744h-vrx3

Improper input validation in Apple operating systems enables denial of service

MEDIUM 40

A denial-of-service issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2026-10-26 Fixed in 27.2 CWE-20

TI-2026-80853 CVE-2026-112637 · GHSA-rw62-8h24-2hp5

Use-after-free in Apple Safari and iOS enables code execution

MEDIUM 41

A use-after-free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80727 CVE-2026-86978 · GHSA-jxqx-3886-8hgm

Improper checks in Apple iOS, iPadOS, macOS and tvOS expose user data

LOW 15

This issue was addressed with improved checks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00196 Published 2026-10-26 Fixed in 27.2 CWE-200

TI-2026-80694 CVE-2026-84494 · GHSA-7c44-8rv6-qx29

Out-of-bounds write in Apple iOS and macOS allows kernel memory corruption

LOW 32

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00191 Published 2026-10-26 Fixed in 27.2 CWE-787

TI-2026-80767 CVE-2026-112485 · GHSA-83wm-5hhw-j54m

Memory corruption in Apple operating systems from crafted 3D models

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2026-10-26 Fixed in 27.2, 15.8.2 +1 CWE-787

TI-2026-80881 CVE-2026-112692 · GHSA-9qw8-p7pq-6jqx

Missing authorization in Apple iOS lets apps access sensitive user data

LOW 24

This issue was addressed with additional entitlement checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00158 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80747 CVE-2026-112446 · GHSA-wpj9-2hg2-h3g5

Missing authorization in Apple iOS, macOS, tvOS, visionOS and watchOS

LOW 33

This issue was addressed with additional entitlement checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00391 Published 2026-10-26 Fixed in 27.2, 15.8 +2 CWE-862

TI-2026-80874 CVE-2026-112685 · GHSA-pjvx-qq56-vgxm

Missing authorization in Apple operating systems exposes user data

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00167 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80894 CVE-2026-113903 · GHSA-49ww-xjpp-q8rx

Use-after-free in Apple Safari and Apple platforms allows memory modification

LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00384 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80835 CVE-2026-112607 · GHSA-p746-wqpp-44fv

Out-of-bounds read in Apple iOS, iPadOS and macOS may leak memory

MEDIUM 42

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00566 Published 2026-10-26 Fixed in 27.2 CWE-125

TI-2026-80830 CVE-2026-112596 · GHSA-cjm4-6q78-6cq7

Integer overflow in Apple video processing can crash systems

LOW 24

An integer overflow was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00188 Published 2026-10-26 Fixed in 27.2 CWE-190

TI-2026-80863 CVE-2026-112666 · GHSA-ch2v-4p85-v55q

Use-after-free in Apple Safari and iOS crashes on crafted web content

LOW 20

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00383 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80789 CVE-2026-112518 · GHSA-qgwx-p9rr-7xp5

Apple OS signature validation flaw allows KDC impersonation

LOW 28

An issue with signature validation was addressed with improved checks.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00381 Published 2026-10-26 Fixed in 27.2 CWE-347

TI-2026-80831 CVE-2026-112599 · GHSA-8ghf-5c8x-rhrm

Use-after-free in Apple Safari and other Apple operating systems

LOW 29

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00457 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80865 CVE-2026-112669 · GHSA-7x95-55rf-3jqm

Race condition in Apple Safari can crash browser via web content

LOW 29

A race condition was addressed with improved state handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0031 Published 2026-10-26 Fixed in 27.2 CWE-362

TI-2026-80829 CVE-2026-112595 · GHSA-7294-vf7f-q4m6

Improper authentication in Apple systems exposes Thread networks

MEDIUM 40

This issue was addressed with improved authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00782 Published 2026-10-26 Fixed in 27.2 CWE-287

TI-2026-80893 CVE-2026-113901 · GHSA-vg2x-43w7-qw73

Use-after-free in Apple Safari, iOS, iPadOS, macOS and visionOS

LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0053 Published 2026-10-26 Fixed in 27.2 CWE-416

TI-2026-80876 CVE-2026-112687 · GHSA-8jqw-9234-45p2

Out-of-bounds write in Apple iOS, iPadOS and tvOS

LOW 24

This issue was addressed by removing the vulnerable code.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00158 Published 2026-10-26 Fixed in 27.2 CWE-787

TI-2026-80777 CVE-2026-112500 · GHSA-7qrr-rwf8-cp2q

Apple iOS, macOS and visionOS leak original email behind Hide My Email

LOW 30

A logic issue was addressed with improved restrictions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00435 Published 2026-10-26 Fixed in 27.2 CWE-200

TI-2026-80743 CVE-2026-112432 · GHSA-jqgv-73rh-fhv9

Sensitive user data exposed through logs in Apple operating systems

LOW 27

A logging issue was addressed with improved data redaction.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00197 Published 2026-10-26 Fixed in 27.2 CWE-532

Vulnerabilities

Filters