Vulnerabilities

TI-2026-82797 CVE-2026-112605 · GHSA-rw75-96m6-mgg9

Symlink handling flaw in Apple Xcode lets apps read arbitrary files

LOW 15

This issue was addressed with improved handling of symlinks.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00128 Published 2026-10-30 Fixed in 27.2 CWE-59

TI-2026-82796 CVE-2026-112602 · GHSA-93hr-9r36-3cx8

Improper authorization in Apple Xcode lets apps access sensitive user data

LOW 15

An authorization issue was addressed with improved state management.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00099 Published 2026-10-30 Fixed in 27.2 CWE-285

TI-2026-82257 CVE-2026-113957

Digest pulls in Apple container may run an image other than pinned

LOW 24

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00094 Published 2026-10-29 Fixed in 1.6.0, 0.52.1 CWE-494

TI-2026-82252 CVE-2026-86983

Swift-crypto P-384 VOPRF input length check can terminate process

LOW 26

A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00275 Published 2026-10-28 Fixed in 5.0.3 CWE-20

TI-2026-80710 CVE-2026-86925 · GHSA-x7m3-pq75-cpm9

Missing authorization in Apple iOS, macOS, and visionOS exposes user data

LOW 24

An authorization issue was addressed with improved state management.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80705 CVE-2026-84627 · GHSA-8pf5-rg67-4968

Apple iOS, macOS and visionOS buffer overflow from a crafted image

LOW 33

A buffer overflow was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00202 Published 2026-10-26 Fixed in 26.7.2, 27 +1 CWE-787

TI-2026-80912 CVE-2026-113945 · GHSA-6m6g-xcc9-7rv9

Out-of-bounds read in Apple macOS can crash the system

LOW 24

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00138 Published 2026-10-26 Fixed in 27.2 CWE-125

TI-2026-80686 CVE-2026-65327 · GHSA-65gc-8g6c-7c4p

x

LOW 38

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00253 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-693

TI-2026-80796 CVE-2026-112529 · GHSA-mfcf-j2rj-qwh9

Out-of-bounds read in Apple macOS can crash the system

LOW 39

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00437 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-125

TI-2026-80724 CVE-2026-86972 · GHSA-rm9f-v97j-7v5x

Buffer overflow in Apple audio file processing across Apple platforms

LOW 35

A buffer overflow was addressed with improved size validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.002 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-120

TI-2026-80765 CVE-2026-112483 · GHSA-jwqv-8mh5-368g

Path handling flaw in Apple macOS lets apps modify protected files

LOW 24

A path handling issue was addressed with improved validation.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00195 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-22

TI-2026-80898 CVE-2026-113912 · GHSA-jmq9-px9w-jqm7

Out-of-bounds access in Apple media handling can crash apps

LOW 31

An out-of-bounds access issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00381 Published 2026-10-26 Fixed in 26.7, 27.2 +2 CWE-125

TI-2026-80775 CVE-2026-112495 · GHSA-m43m-hcw9-ppwv

Out-of-bounds read in macOS lets apps read kernel memory

LOW 30

An out-of-bounds read was addressed with improved bounds checking.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00184 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-125

TI-2026-80721 CVE-2026-86964 · GHSA-7x27-f9xh-jfqp

Null pointer dereference in Apple OS lets apps crash the system

LOW 24

A null pointer dereference was addressed with improved input validation.

CVSS — EPSS 0.00602 Published 2026-10-26 Fixed in 27, 26.7.2

TI-2026-80895 CVE-2026-113904 · GHSA-vpcx-m956-4636

Use-after-free in Apple Safari and other Apple platforms

LOW 21

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00559 Published 2026-10-26 Fixed in 27.2, 26.7.2 CWE-416

TI-2026-80841 CVE-2026-112616 · GHSA-hc3w-hc48-f2w6

Missing authorization in Apple iOS, iPadOS, macOS and visionOS

LOW 24

An authorization issue was addressed with improved access control.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00155 Published 2026-10-26 Fixed in 27.2 CWE-862

TI-2026-80824 CVE-2026-112568 · GHSA-r972-jxmw-mjjf

Logic flaw in Apple macOS lets crafted files bypass Gatekeeper

LOW 24

A logic issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00169 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-693

TI-2026-80887 CVE-2026-112704 · GHSA-cvpr-vv4v-pvqr

Information leak in Apple macOS lets malicious apps escape sandbox

LOW 28

An information leakage was addressed with additional validation.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00159 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-200

TI-2026-80751 CVE-2026-112456 · GHSA-9v2r-2jx2-7wpf

Out-of-bounds write in Apple iOS, iPadOS and macOS

LOW 35

An out-of-bounds write issue was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0017 Published 2026-10-26 Fixed in 26.7.2, 27.2 +1 CWE-787

TI-2026-80784 CVE-2026-112513 · GHSA-6jp8-qjr6-pcm2

Symlink validation flaw in Apple macOS lets apps escape sandbox

LOW 39

This issue was addressed with improved validation of symlinks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00419 Published 2026-10-26 Fixed in 27.2 CWE-59

TI-2026-80808 CVE-2026-112544 · GHSA-c2f5-vrg4-xpj9

Out-of-bounds write in Apple macOS crashes system via disk image

LOW 29

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00377 Published 2026-10-26 Fixed in 27.2 CWE-787

TI-2026-80871 CVE-2026-112682 · GHSA-6x5g-j62f-383c

Improper input validation in Apple iOS, macOS, visionOS and watchOS

MEDIUM 40

An input validation issue was addressed with improved input validation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00693 Published 2026-10-26 Fixed in 26.7.2, 27.2 CWE-20

TI-2026-80735 CVE-2026-112417 · GHSA-59gp-5p9g-4mrh

Integer overflow in Apple visionOS enables memory corruption

LOW 35

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00154 Published 2026-10-26 Fixed in 27.2 CWE-190

TI-2026-80811 CVE-2026-112552 · GHSA-v6jc-q2vw-38c8

Out-of-bounds write in Apple macOS allows system termination

MEDIUM 50

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00602 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-787

TI-2026-80781 CVE-2026-112505 · GHSA-hj35-843g-39w7

Out-of-bounds write in macOS Screen Sharing can corrupt process memory

LOW 35

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2026-10-26 Fixed in 15.8.2, 26.7.2 +1 CWE-787

Vulnerabilities

Filters