Vulnerabilities

TI-2026-76703 CVE-2026-86975 · GHSA-hqp4-33rx-h858

Out-of-bounds read in Apple operating systems crashes on crafted images

LOW 20

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00287 Published 2026-10-20 Fixed in 27 CWE-125

TI-2026-76701 CVE-2026-86962 · GHSA-hmv8-g358-v6hx

Double free in Apple iOS, iPadOS and macOS causes system termination

LOW 24

A double free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00212 Published 2026-10-20 Fixed in 26.7, 27 +1 CWE-415

TI-2026-76698 CVE-2026-86957 · GHSA-mcq2-6h3f-3vf3

Out-of-bounds read in Apple operating systems can crash the system

LOW 29

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00316 Published 2026-10-20 Fixed in 26.7, 27 +1 CWE-125

TI-2026-76696 CVE-2026-86953 · GHSA-3hf6-q2c8-cwvf

Out-of-bounds write in Apple OS allows denial of service from nearby

LOW 21

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00232 Published 2026-10-20 Fixed in 27 CWE-787

TI-2026-76687 CVE-2026-86922 · GHSA-gm6q-c5mj-f444

Type confusion in Apple Safari and iOS allows code execution

MEDIUM 40

A type confusion issue was addressed with improved state management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00335 Published 2026-10-20 Partial fix · 27 CWE-843

TI-2026-76686 CVE-2026-86921 · GHSA-c448-32wg-fc83

Apple iOS and macOS permissions flaw lets attackers overwrite files

LOW 27

A permissions issue was addressed with improved validation.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00142 Published 2026-10-20 Fixed in 26.7, 27 CWE-269

TI-2026-76685 CVE-2026-86919 · GHSA-h5xf-8gvq-cm89

Stack overflow in Apple iOS, macOS and visionOS allows code execution

MEDIUM 40

A stack overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00392 Published 2026-10-20 Fixed in 26.7, 27 +1 CWE-121

TI-2026-76684 CVE-2026-86918 · GHSA-2c97-cvw9-q2hq

Out-of-bounds write in Apple iOS, macOS and other OS allows app crash

LOW 20

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00287 Published 2026-10-20 Fixed in 27 CWE-787

TI-2026-76681 CVE-2026-86913 · GHSA-gqc4-wm7r-3m7f

Use after free in Apple operating systems when processing media files

LOW 24

A use after free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00331 Published 2026-10-20 Fixed in 26.7, 27 +1 CWE-416

TI-2026-76677 CVE-2026-86872 · GHSA-qhr9-6j48-39x4

Logic issue in Apple Safari, visionOS and watchOS

LOW 24

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00265 Published 2026-10-20 Fixed in 27 CWE-843

TI-2026-76674 CVE-2026-84613 · GHSA-vwm3-g44x-f7c2

Out-of-bounds write in Apple operating systems can crash devices

LOW 29

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00329 Published 2026-10-20 Fixed in 26.7, 27 +1 CWE-787

TI-2026-76673 CVE-2026-84582 · GHSA-3934-4xv3-w89q

Apple privacy issue lets apps access sensitive user data

LOW 24

A privacy issue was addressed with improved access restrictions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0014 Published 2026-10-20 Fixed in 27 CWE-284

TI-2026-76670 CVE-2026-84508 · GHSA-xr5p-5qfr-xq46

Access control flaw in Apple iOS, macOS and visionOS exposes user data

LOW 24

This issue was addressed with improved validation of the caller's access.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-10-20 Fixed in 27, 26.7 CWE-284

TI-2026-76652 CVE-2026-28850 · GHSA-3rxq-qpj2-q7xf

Missing authorization in Apple macOS and visionOS exposes user data

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00138 Published 2026-10-20 Fixed in 15.8, 27 CWE-862

Vulnerabilities

Filters