Search
Find a vulnerability
Search criteria
699 vulnerabilities found for visionos by apple
CERTFR-2026-AVI-1172
Vulnerability from certfr_avis - Published: 2026-09-15 - Updated: 2026-09-15
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | iOS | iOS versions antérieures à 27 | ||
| Apple | macOS | macOS Tahoe versions antérieures à 26.7 | ||
| Apple | Safari | Safari versions antérieures à 27 | ||
| Apple | Xcode | Xcode versions antérieures à 27 | ||
| Apple | macOS | macOS Golden Gate versions antérieures à 27 | ||
| Apple | iOS | iOS versions antérieures à 26.7 | ||
| Apple | iPadOS | iPadOS versions antérieures à 26.7 | ||
| Apple | tvOS | tvOS versions antérieures à 27 | ||
| Apple | iPadOS | iPadOS versions antérieures à 27 | ||
| Apple | visionOS | visionOS versions antérieures à 26.6.1 | ||
| Apple | visionOS | visionOS versions antérieures à 27 | ||
| Apple | macOS | macOS Sequoia versions antérieures à 15.8 | ||
| Apple | watchOS | watchOS versions antérieures à 27 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "iOS versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "iOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.7",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Xcode versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "Xcode",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Golden Gate versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 26.7",
"product": {
"name": "iOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 26.7",
"product": {
"name": "iPadOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "tvOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "iPadOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "visionOS versions ant\u00e9rieures \u00e0 26.6.1",
"product": {
"name": "visionOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "visionOS versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "visionOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.8",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 27",
"product": {
"name": "watchOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-86886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86886"
},
{
"name": "CVE-2026-86885",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86885"
},
{
"name": "CVE-2026-65362",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65362"
},
{
"name": "CVE-2026-28930",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28930"
},
{
"name": "CVE-2026-86879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86879"
},
{
"name": "CVE-2026-43697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43697"
},
{
"name": "CVE-2026-65391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65391"
},
{
"name": "CVE-2026-84566",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84566"
},
{
"name": "CVE-2026-84572",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84572"
},
{
"name": "CVE-2026-43664",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43664"
},
{
"name": "CVE-2026-84558",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84558"
},
{
"name": "CVE-2026-84553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84553"
},
{
"name": "CVE-2026-84626",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84626"
},
{
"name": "CVE-2026-84549",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84549"
},
{
"name": "CVE-2026-64788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64788"
},
{
"name": "CVE-2026-65337",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65337"
},
{
"name": "CVE-2026-84527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84527"
},
{
"name": "CVE-2026-84487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84487"
},
{
"name": "CVE-2026-86890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86890"
},
{
"name": "CVE-2026-84556",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84556"
},
{
"name": "CVE-2026-84489",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84489"
},
{
"name": "CVE-2026-84520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84520"
},
{
"name": "CVE-2026-65331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65331"
},
{
"name": "CVE-2026-65352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65352"
},
{
"name": "CVE-2026-43695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43695"
},
{
"name": "CVE-2026-43738",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43738"
},
{
"name": "CVE-2026-84621",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84621"
},
{
"name": "CVE-2026-84517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84517"
},
{
"name": "CVE-2026-84585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84585"
},
{
"name": "CVE-2026-84522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84522"
},
{
"name": "CVE-2026-86887",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86887"
},
{
"name": "CVE-2026-65381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65381"
},
{
"name": "CVE-2026-43791",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43791"
},
{
"name": "CVE-2026-86905",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86905"
},
{
"name": "CVE-2026-84565",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84565"
},
{
"name": "CVE-2026-86902",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86902"
},
{
"name": "CVE-2026-84580",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84580"
},
{
"name": "CVE-2026-84559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84559"
},
{
"name": "CVE-2026-65332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65332"
},
{
"name": "CVE-2026-84491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84491"
},
{
"name": "CVE-2026-65413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65413"
},
{
"name": "CVE-2026-84615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84615"
},
{
"name": "CVE-2026-43661",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43661"
},
{
"name": "CVE-2026-64760",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64760"
},
{
"name": "CVE-2026-65406",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65406"
},
{
"name": "CVE-2026-84611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84611"
},
{
"name": "CVE-2026-64712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64712"
},
{
"name": "CVE-2026-65365",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65365"
},
{
"name": "CVE-2026-65343",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65343"
},
{
"name": "CVE-2026-84630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84630"
},
{
"name": "CVE-2026-84551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84551"
},
{
"name": "CVE-2026-65400",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65400"
},
{
"name": "CVE-2026-43696",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43696"
},
{
"name": "CVE-2026-84635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84635"
},
{
"name": "CVE-2026-84540",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84540"
},
{
"name": "CVE-2026-65364",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65364"
},
{
"name": "CVE-2026-65340",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65340"
},
{
"name": "CVE-2026-84538",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84538"
},
{
"name": "CVE-2026-64790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64790"
},
{
"name": "CVE-2026-64761",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64761"
},
{
"name": "CVE-2026-43698",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43698"
},
{
"name": "CVE-2026-65399",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65399"
},
{
"name": "CVE-2026-84550",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84550"
},
{
"name": "CVE-2026-86895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86895"
},
{
"name": "CVE-2026-65412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65412"
},
{
"name": "CVE-2026-20683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20683"
},
{
"name": "CVE-2026-86876",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86876"
},
{
"name": "CVE-2022-3437",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-3437"
},
{
"name": "CVE-2026-43763",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43763"
},
{
"name": "CVE-2026-84506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84506"
},
{
"name": "CVE-2026-84512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84512"
},
{
"name": "CVE-2026-84631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84631"
},
{
"name": "CVE-2026-84544",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84544"
},
{
"name": "CVE-2026-65344",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65344"
},
{
"name": "CVE-2026-43691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43691"
},
{
"name": "CVE-2026-64753",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64753"
},
{
"name": "CVE-2026-65360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65360"
},
{
"name": "CVE-2026-64752",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64752"
},
{
"name": "CVE-2026-84620",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84620"
},
{
"name": "CVE-2026-84543",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84543"
},
{
"name": "CVE-2026-84629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84629"
},
{
"name": "CVE-2026-84541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84541"
},
{
"name": "CVE-2026-84505",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84505"
},
{
"name": "CVE-2026-64781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64781"
},
{
"name": "CVE-2026-84623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84623"
},
{
"name": "CVE-2026-84619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84619"
},
{
"name": "CVE-2026-84513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84513"
},
{
"name": "CVE-2026-84534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84534"
},
{
"name": "CVE-2026-86888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86888"
},
{
"name": "CVE-2026-84531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84531"
},
{
"name": "CVE-2026-65345",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65345"
},
{
"name": "CVE-2026-84625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84625"
},
{
"name": "CVE-2026-84497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84497"
},
{
"name": "CVE-2026-84554",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84554"
},
{
"name": "CVE-2026-64787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
},
{
"name": "CVE-2026-65339",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65339"
},
{
"name": "CVE-2026-86897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86897"
},
{
"name": "CVE-2026-86884",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86884"
},
{
"name": "CVE-2026-84596",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84596"
},
{
"name": "CVE-2026-86911",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86911"
},
{
"name": "CVE-2026-43674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43674"
},
{
"name": "CVE-2026-84532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84532"
},
{
"name": "CVE-2026-28935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28935"
},
{
"name": "CVE-2026-64718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64718"
},
{
"name": "CVE-2026-84600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84600"
},
{
"name": "CVE-2026-43737",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43737"
},
{
"name": "CVE-2026-84524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84524"
},
{
"name": "CVE-2026-86904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86904"
},
{
"name": "CVE-2026-86894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86894"
},
{
"name": "CVE-2026-28969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28969"
},
{
"name": "CVE-2026-65395",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65395"
},
{
"name": "CVE-2026-84593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84593"
},
{
"name": "CVE-2026-84597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84597"
},
{
"name": "CVE-2026-84530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84530"
},
{
"name": "CVE-2026-84533",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84533"
},
{
"name": "CVE-2026-65351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65351"
},
{
"name": "CVE-2026-84576",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84576"
},
{
"name": "CVE-2026-28966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28966"
},
{
"name": "CVE-2026-84568",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84568"
},
{
"name": "CVE-2026-84616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84616"
},
{
"name": "CVE-2026-84581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84581"
},
{
"name": "CVE-2026-64779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64779"
},
{
"name": "CVE-2026-65341",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65341"
},
{
"name": "CVE-2026-84589",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84589"
},
{
"name": "CVE-2026-86882",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86882"
},
{
"name": "CVE-2026-65377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65377"
},
{
"name": "CVE-2026-65410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65410"
},
{
"name": "CVE-2026-84516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84516"
},
{
"name": "CVE-2026-43683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43683"
},
{
"name": "CVE-2026-86917",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86917"
},
{
"name": "CVE-2026-43677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43677"
},
{
"name": "CVE-2026-65404",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65404"
},
{
"name": "CVE-2026-43787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43787"
},
{
"name": "CVE-2026-84518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84518"
},
{
"name": "CVE-2026-43790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43790"
},
{
"name": "CVE-2026-84617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84617"
},
{
"name": "CVE-2026-65334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65334"
},
{
"name": "CVE-2026-84563",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84563"
},
{
"name": "CVE-2026-43689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43689"
},
{
"name": "CVE-2026-84521",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84521"
},
{
"name": "CVE-2026-65414",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65414"
},
{
"name": "CVE-2026-84612",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84612"
},
{
"name": "CVE-2026-84515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84515"
},
{
"name": "CVE-2026-64782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64782"
},
{
"name": "CVE-2026-84537",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84537"
},
{
"name": "CVE-2026-84525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84525"
},
{
"name": "CVE-2026-84523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84523"
},
{
"name": "CVE-2026-28934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28934"
},
{
"name": "CVE-2026-84574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84574"
},
{
"name": "CVE-2026-86889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86889"
},
{
"name": "CVE-2026-65346",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65346"
},
{
"name": "CVE-2026-34979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34979"
},
{
"name": "CVE-2026-64778",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64778"
},
{
"name": "CVE-2026-84601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84601"
},
{
"name": "CVE-2026-65329",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65329"
},
{
"name": "CVE-2026-84555",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84555"
},
{
"name": "CVE-2026-64780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64780"
},
{
"name": "CVE-2026-84514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84514"
},
{
"name": "CVE-2026-65378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65378"
},
{
"name": "CVE-2026-86878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86878"
},
{
"name": "CVE-2026-86924",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86924"
},
{
"name": "CVE-2026-86869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86869"
},
{
"name": "CVE-2026-65354",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65354"
},
{
"name": "CVE-2026-65405",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65405"
},
{
"name": "CVE-2026-84492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84492"
},
{
"name": "CVE-2026-84586",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84586"
},
{
"name": "CVE-2026-43684",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43684"
},
{
"name": "CVE-2026-84583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84583"
},
{
"name": "CVE-2026-84598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84598"
},
{
"name": "CVE-2026-65393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65393"
},
{
"name": "CVE-2026-43688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43688"
},
{
"name": "CVE-2026-84571",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84571"
},
{
"name": "CVE-2026-43786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43786"
},
{
"name": "CVE-2026-84546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84546"
},
{
"name": "CVE-2026-86910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86910"
},
{
"name": "CVE-2026-64714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64714"
},
{
"name": "CVE-2026-43719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43719"
},
{
"name": "CVE-2026-84606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84606"
},
{
"name": "CVE-2026-86901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86901"
},
{
"name": "CVE-2026-86881",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86881"
},
{
"name": "CVE-2026-43687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43687"
},
{
"name": "CVE-2026-86903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86903"
},
{
"name": "CVE-2026-65361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65361"
},
{
"name": "CVE-2026-84577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84577"
},
{
"name": "CVE-2026-84622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84622"
},
{
"name": "CVE-2026-64758",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64758"
},
{
"name": "CVE-2026-65376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65376"
},
{
"name": "CVE-2026-84588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84588"
},
{
"name": "CVE-2026-65349",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65349"
},
{
"name": "CVE-2026-86870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86870"
},
{
"name": "CVE-2026-65390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65390"
},
{
"name": "CVE-2026-86900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86900"
},
{
"name": "CVE-2026-43686",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43686"
},
{
"name": "CVE-2026-84636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84636"
},
{
"name": "CVE-2026-84587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84587"
},
{
"name": "CVE-2026-65380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65380"
},
{
"name": "CVE-2026-43794",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43794"
},
{
"name": "CVE-2026-84548",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84548"
},
{
"name": "CVE-2026-65348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65348"
},
{
"name": "CVE-2026-65355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65355"
},
{
"name": "CVE-2026-65409",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65409"
},
{
"name": "CVE-2026-65403",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65403"
},
{
"name": "CVE-2026-65369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65369"
},
{
"name": "CVE-2026-65382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65382"
},
{
"name": "CVE-2026-84578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84578"
},
{
"name": "CVE-2026-86891",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86891"
},
{
"name": "CVE-2026-84569",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84569"
},
{
"name": "CVE-2026-43702",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43702"
},
{
"name": "CVE-2026-84624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84624"
},
{
"name": "CVE-2026-84609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84609"
},
{
"name": "CVE-2026-28937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28937"
},
{
"name": "CVE-2026-84507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84507"
},
{
"name": "CVE-2026-28899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28899"
},
{
"name": "CVE-2026-84575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84575"
},
{
"name": "CVE-2026-84560",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84560"
},
{
"name": "CVE-2026-43743",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43743"
},
{
"name": "CVE-2026-65336",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65336"
},
{
"name": "CVE-2026-43692",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43692"
},
{
"name": "CVE-2026-43785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43785"
},
{
"name": "CVE-2026-43741",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43741"
},
{
"name": "CVE-2026-84519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84519"
},
{
"name": "CVE-2026-64784",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64784"
},
{
"name": "CVE-2026-84552",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84552"
},
{
"name": "CVE-2026-86892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86892"
},
{
"name": "CVE-2026-64715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64715"
},
{
"name": "CVE-2026-65371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65371"
},
{
"name": "CVE-2026-65402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65402"
},
{
"name": "CVE-2026-84509",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84509"
},
{
"name": "CVE-2026-28968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28968"
},
{
"name": "CVE-2026-65347",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65347"
},
{
"name": "CVE-2026-86893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86893"
},
{
"name": "CVE-2026-43795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43795"
},
{
"name": "CVE-2026-84618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84618"
},
{
"name": "CVE-2026-86909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86909"
},
{
"name": "CVE-2026-43788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43788"
},
{
"name": "CVE-2026-86883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86883"
},
{
"name": "CVE-2026-84567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84567"
},
{
"name": "CVE-2026-65415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65415"
},
{
"name": "CVE-2026-65383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65383"
},
{
"name": "CVE-2026-84511",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84511"
},
{
"name": "CVE-2026-84628",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84628"
},
{
"name": "CVE-2026-84602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84602"
},
{
"name": "CVE-2026-65411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65411"
},
{
"name": "CVE-2026-84535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84535"
},
{
"name": "CVE-2026-84561",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84561"
},
{
"name": "CVE-2026-65335",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65335"
},
{
"name": "CVE-2026-84584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84584"
},
{
"name": "CVE-2026-84573",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84573"
},
{
"name": "CVE-2026-84570",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84570"
},
{
"name": "CVE-2026-84632",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84632"
},
{
"name": "CVE-2026-84526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84526"
},
{
"name": "CVE-2026-65333",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65333"
},
{
"name": "CVE-2026-43789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43789"
},
{
"name": "CVE-2026-84607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84607"
},
{
"name": "CVE-2026-65408",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65408"
},
{
"name": "CVE-2026-84536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84536"
},
{
"name": "CVE-2026-64736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64736"
},
{
"name": "CVE-2026-43715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43715"
},
{
"name": "CVE-2026-84564",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84564"
},
{
"name": "CVE-2026-43690",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43690"
},
{
"name": "CVE-2026-65342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65342"
},
{
"name": "CVE-2026-65359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65359"
},
{
"name": "CVE-2026-43760",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43760"
},
{
"name": "CVE-2026-84510",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84510"
},
{
"name": "CVE-2026-65358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65358"
},
{
"name": "CVE-2026-65374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65374"
},
{
"name": "CVE-2026-65398",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65398"
},
{
"name": "CVE-2026-65338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65338"
},
{
"name": "CVE-2026-84603",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84603"
},
{
"name": "CVE-2026-65401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65401"
},
{
"name": "CVE-2026-64756",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64756"
},
{
"name": "CVE-2026-65330",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65330"
},
{
"name": "CVE-2026-65407",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65407"
},
{
"name": "CVE-2026-86898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86898"
},
{
"name": "CVE-2026-65375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65375"
}
],
"initial_release_date": "2026-09-15T00:00:00",
"last_revision_date": "2026-09-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1172",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149036",
"url": "https://support.apple.com/en-us/149036"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149041",
"url": "https://support.apple.com/en-us/149041"
},
{
"published_at": "2026-08-17",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 148353",
"url": "https://support.apple.com/en-us/148353"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149035",
"url": "https://support.apple.com/en-us/149035"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149034",
"url": "https://support.apple.com/en-us/149034"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149042",
"url": "https://support.apple.com/en-us/149042"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149039",
"url": "https://support.apple.com/en-us/149039"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149038",
"url": "https://support.apple.com/en-us/149038"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149040",
"url": "https://support.apple.com/en-us/149040"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149043",
"url": "https://support.apple.com/en-us/149043"
},
{
"published_at": "2026-09-14",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149037",
"url": "https://support.apple.com/en-us/149037"
}
]
}
CVE-2026-65409 (GCVE-0-2026-65409)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:52 – Updated: 2026-09-15 17:46
VLAI
EPSS
VEX
Summary
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:43 UTC
CWE
- An app may be able to cause a denial of service
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65409",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:43:56.878679Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:46:56.951Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause a denial of service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:52:04.716Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65409",
"datePublished": "2026-09-14T20:52:04.716Z",
"dateReserved": "2026-07-22T00:47:18.621Z",
"dateUpdated": "2026-09-15T17:46:56.951Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86876 (GCVE-0-2026-86876)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-14 22:50
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.
Severity
5.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-14 22:50 UTC
CWE
- A sandboxed process may be able to circumvent sandbox restrictions
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86876",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-14T22:50:41.690826Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T22:50:45.086Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A sandboxed process may be able to circumvent sandbox restrictions",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:59.688Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86876",
"datePublished": "2026-09-14T20:51:59.688Z",
"dateReserved": "2026-09-08T16:43:41.871Z",
"dateUpdated": "2026-09-14T22:50:45.086Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84534 (GCVE-0-2026-84534)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 19:25
VLAI
EPSS
VEX
Summary
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 19:25 UTC
CWE
- Extracting a maliciously crafted archive may allow an attacker to write arbitrary files
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84534",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T19:25:43.930477Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T19:25:48.116Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Extracting a maliciously crafted archive may allow an attacker to write arbitrary files",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:54.673Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84534",
"datePublished": "2026-09-14T20:51:54.673Z",
"dateReserved": "2026-09-01T21:13:17.750Z",
"dateUpdated": "2026-09-15T19:25:48.116Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-43686 (GCVE-0-2026-43686)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-16 03:56
VLAI
EPSS
VEX
Summary
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 00:00 UTC
CWE
- Connecting to a malicious NFS server may lead to kernel memory corruption
- CWE-416 - Use After Free
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-43686",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T03:56:22.482Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Connecting to a malicious NFS server may lead to kernel memory corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:49.511Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-43686",
"datePublished": "2026-09-14T20:51:49.511Z",
"dateReserved": "2026-05-01T22:46:21.642Z",
"dateUpdated": "2026-09-16T03:56:22.482Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84575 (GCVE-0-2026-84575)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 17:52
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:50 UTC
CWE
- Processing a maliciously crafted file may lead to unexpected app termination
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
5 products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84575",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:50:43.434325Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:52:06.397Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected app termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:48.465Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84575",
"datePublished": "2026-09-14T20:51:48.465Z",
"dateReserved": "2026-09-01T21:13:17.756Z",
"dateUpdated": "2026-09-15T17:52:06.397Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86883 (GCVE-0-2026-86883)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 17:54
VLAI
EPSS
VEX
Summary
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:52 UTC
CWE
- An app may be able to access sensitive user data
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
2 references
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86883",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:52:41.150809Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:54:59.170Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:45.531Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86883",
"datePublished": "2026-09-14T20:51:45.531Z",
"dateReserved": "2026-09-08T16:43:41.871Z",
"dateUpdated": "2026-09-15T17:54:59.170Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65405 (GCVE-0-2026-65405)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 18:04
VLAI
EPSS
VEX
Summary
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to determine kernel memory layout.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 18:03 UTC
CWE
- An app may be able to determine kernel memory layout
- CWE-457 - Use of Uninitialized Variable
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65405",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T18:03:30.431901Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-457",
"description": "CWE-457 Use of Uninitialized Variable",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T18:04:26.297Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to determine kernel memory layout."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to determine kernel memory layout",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:42.387Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65405",
"datePublished": "2026-09-14T20:51:42.387Z",
"dateReserved": "2026-07-22T00:46:56.740Z",
"dateUpdated": "2026-09-15T18:04:26.297Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64717 (GCVE-0-2026-64717)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 18:10
VLAI
EPSS
VEX
Summary
A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.
Severity
6.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 18:09 UTC
CWE
- An app may be able to cause unexpected system termination or corrupt kernel memory
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 18.7.10
(custom)
Affected: 0 , < 26.6 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.7.8
(custom)
Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-64717",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T18:09:28.155082Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T18:10:08.155Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.7.10",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:38.304Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/148287"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64717",
"datePublished": "2026-09-14T20:51:38.304Z",
"dateReserved": "2026-07-20T18:09:35.084Z",
"dateUpdated": "2026-09-15T18:10:08.155Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86895 (GCVE-0-2026-86895)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 18:15
VLAI
EPSS
VEX
Summary
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 18:15 UTC
CWE
- A local app may be able to read a persistent account identifier
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86895",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T18:15:09.423450Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T18:15:36.157Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A local app may be able to read a persistent account identifier",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:36.216Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86895",
"datePublished": "2026-09-14T20:51:36.216Z",
"dateReserved": "2026-09-08T16:43:41.872Z",
"dateUpdated": "2026-09-15T18:15:36.157Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84611 (GCVE-0-2026-84611)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-16 03:56
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 00:00 UTC
CWE
- Processing a maliciously crafted 3D model may lead to memory corruption
- CWE-787 - Out-of-bounds Write
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84611",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T03:56:23.631Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted 3D model may lead to memory corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:31.186Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84611",
"datePublished": "2026-09-14T20:51:31.186Z",
"dateReserved": "2026-09-01T21:13:23.285Z",
"dateUpdated": "2026-09-16T03:56:23.631Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84492 (GCVE-0-2026-84492)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 14:37
VLAI
EPSS
VEX
Summary
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
Severity
4.7 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 14:37 UTC
CWE
- An app may be able to cause unexpected system termination
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84492",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T14:37:17.672496Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T14:37:20.013Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:30.118Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84492",
"datePublished": "2026-09-14T20:51:30.118Z",
"dateReserved": "2026-09-01T20:50:08.321Z",
"dateUpdated": "2026-09-15T14:37:20.013Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84607 (GCVE-0-2026-84607)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-16 03:55
VLAI
EPSS
VEX
Summary
A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel privileges.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 00:00 UTC
CWE
- A sandboxed app may be able to execute arbitrary code with kernel privileges
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84607",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-16T03:55:39.550Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A sandboxed app may be able to execute arbitrary code with kernel privileges",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:27.510Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84607",
"datePublished": "2026-09-14T20:51:27.510Z",
"dateReserved": "2026-09-01T21:13:23.285Z",
"dateUpdated": "2026-09-16T03:55:39.550Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86905 (GCVE-0-2026-86905)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 14:30
VLAI
EPSS
VEX
Summary
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 14:30 UTC
CWE
- An app may be able to delete credentials stored in Keychain
- CWE-284 - Improper Access Control
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86905",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T14:30:17.746613Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T14:30:20.511Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to delete credentials stored in Keychain",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:26.556Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86905",
"datePublished": "2026-09-14T20:51:26.556Z",
"dateReserved": "2026-09-08T16:43:41.874Z",
"dateUpdated": "2026-09-15T14:30:20.511Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84596 (GCVE-0-2026-84596)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 14:47
VLAI
EPSS
VEX
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 14:47 UTC
CWE
- Processing a maliciously crafted font may result in the disclosure of process memory
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84596",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T14:47:00.667363Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T14:47:03.607Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted font may result in the disclosure of process memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:25.617Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84596",
"datePublished": "2026-09-14T20:51:25.617Z",
"dateReserved": "2026-09-01T21:13:17.758Z",
"dateUpdated": "2026-09-15T14:47:03.607Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84597 (GCVE-0-2026-84597)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 14:48
VLAI
EPSS
VEX
Summary
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 14:48 UTC
CWE
- Processing a maliciously crafted font may result in the disclosure of process memory
- CWE-125 - Out-of-bounds Read
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84597",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T14:48:03.588031Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T14:48:07.880Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font may result in the disclosure of process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted font may result in the disclosure of process memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:23.734Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84597",
"datePublished": "2026-09-14T20:51:23.734Z",
"dateReserved": "2026-09-01T21:13:17.758Z",
"dateUpdated": "2026-09-15T14:48:07.880Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84606 (GCVE-0-2026-84606)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 18:20
VLAI
EPSS
VEX
Summary
A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 18:18 UTC
CWE
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84606",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T18:18:57.292008Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-330",
"description": "CWE-330 Use of Insufficiently Random Values",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-359",
"description": "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T18:20:44.644Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to identify a user across reinstalls",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:18.803Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84606",
"datePublished": "2026-09-14T20:51:18.803Z",
"dateReserved": "2026-09-01T21:13:23.285Z",
"dateUpdated": "2026-09-15T18:20:44.644Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65412 (GCVE-0-2026-65412)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 18:27
VLAI
EPSS
VEX
Summary
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 18:26 UTC
CWE
- Processing web content may lead to a denial-of-service
- CWE-476 - NULL Pointer Dereference
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65412",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T18:26:56.614227Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T18:27:36.120Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing web content may lead to a denial-of-service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:10.092Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65412",
"datePublished": "2026-09-14T20:51:10.092Z",
"dateReserved": "2026-07-22T00:47:18.621Z",
"dateUpdated": "2026-09-15T18:27:36.120Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86882 (GCVE-0-2026-86882)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 15:06
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:05 UTC
CWE
- Processing a maliciously crafted image may lead to unexpected process termination
- CWE-787 - Out-of-bounds Write
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86882",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:05:59.829427Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:06:04.034Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted image may lead to unexpected process termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:07.153Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86882",
"datePublished": "2026-09-14T20:51:07.153Z",
"dateReserved": "2026-09-08T16:43:41.871Z",
"dateUpdated": "2026-09-15T15:06:04.034Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-43687 (GCVE-0-2026-43687)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 15:26
VLAI
EPSS
VEX
Summary
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:26 UTC
CWE
- Connecting to a malicious NFS server may disclose kernel memory
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
Impacted products
5 products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-43687",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:26:37.606289Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:26:42.594Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Connecting to a malicious NFS server may disclose kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:04.124Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-43687",
"datePublished": "2026-09-14T20:51:04.124Z",
"dateReserved": "2026-05-01T22:46:21.642Z",
"dateUpdated": "2026-09-15T15:26:42.594Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84523 (GCVE-0-2026-84523)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:51 – Updated: 2026-09-15 15:07
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or write kernel memory.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:07 UTC
CWE
- An app may be able to cause unexpected system termination or write kernel memory
- CWE-787 - Out-of-bounds Write
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84523",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:07:39.091661Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:07:45.300Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or write kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or write kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:51:02.122Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84523",
"datePublished": "2026-09-14T20:51:02.122Z",
"dateReserved": "2026-09-01T21:13:17.749Z",
"dateUpdated": "2026-09-15T15:07:45.300Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64736 (GCVE-0-2026-64736)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-15 15:25
VLAI
EPSS
VEX
Summary
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:25 UTC
CWE
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-64736",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:25:00.602494Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
},
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:25:09.999Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:56.764Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/148281"
},
{
"url": "https://support.apple.com/en-us/148282"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64736",
"datePublished": "2026-09-14T20:50:56.764Z",
"dateReserved": "2026-07-20T18:09:54.848Z",
"dateUpdated": "2026-09-15T15:25:09.999Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84630 (GCVE-0-2026-84630)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-15 15:09
VLAI
EPSS
VEX
Summary
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
Severity
4.7 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:09 UTC
CWE
- An app may be able to cause unexpected system termination
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84630",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:09:35.658568Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:09:39.611Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:54.789Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84630",
"datePublished": "2026-09-14T20:50:54.789Z",
"dateReserved": "2026-09-01T21:13:23.287Z",
"dateUpdated": "2026-09-15T15:09:39.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86898 (GCVE-0-2026-86898)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-17 15:56
VLAI
EPSS
VEX
Summary
A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.
Severity
5.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-17 15:56 UTC
CWE
- Opening a maliciously crafted webarchive file may lead to universal cross-site scripting
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86898",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T15:56:23.950479Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T15:56:27.129Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Opening a maliciously crafted webarchive file may lead to universal cross-site scripting",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:52.675Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149039"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86898",
"datePublished": "2026-09-14T20:50:52.675Z",
"dateReserved": "2026-09-08T16:43:41.873Z",
"dateUpdated": "2026-09-17T15:56:27.129Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65371 (GCVE-0-2026-65371)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-17 15:57
VLAI
EPSS
VEX
Summary
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-17 15:56 UTC
CWE
- An app may be able to disclose kernel memory
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65371",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T15:56:58.390482Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T15:57:46.611Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to disclose kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to disclose kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:50.703Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65371",
"datePublished": "2026-09-14T20:50:50.703Z",
"dateReserved": "2026-07-22T00:46:16.023Z",
"dateUpdated": "2026-09-17T15:57:46.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84626 (GCVE-0-2026-84626)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-17 16:51
VLAI
EPSS
VEX
Summary
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-17 16:51 UTC
CWE
- An app may be able to identify what other apps a user has installed
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
8 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.7
(custom)
Affected: 0 , < 27 (custom) |
|
| Apple | macOS |
Affected:
0 , < 15.8
(custom)
Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 27
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 27
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-84626",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T16:51:25.320452Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T16:51:27.790Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to identify what other apps a user has installed",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:47.768Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84626",
"datePublished": "2026-09-14T20:50:47.768Z",
"dateReserved": "2026-09-01T21:13:23.287Z",
"dateUpdated": "2026-09-17T16:51:27.790Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65395 (GCVE-0-2026-65395)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-15 15:11
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:11 UTC
CWE
- Processing a maliciously crafted image may result in memory corruption
- CWE-787 - Out-of-bounds Write
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65395",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:11:52.274483Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:11:57.916Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted image may result in memory corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:44.934Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65395",
"datePublished": "2026-09-14T20:50:44.934Z",
"dateReserved": "2026-07-22T00:46:44.573Z",
"dateUpdated": "2026-09-15T15:11:57.916Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65403 (GCVE-0-2026-65403)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-17 16:52
VLAI
EPSS
VEX
Summary
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-17 16:52 UTC
CWE
- An app may be able to access sensitive user data
- CWE-284 - Improper Access Control
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65403",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T16:52:21.480388Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T16:52:26.008Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:43.885Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149042"
},
{
"url": "https://support.apple.com/en-us/149043"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65403",
"datePublished": "2026-09-14T20:50:43.885Z",
"dateReserved": "2026-07-22T00:46:56.740Z",
"dateUpdated": "2026-09-17T16:52:26.008Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65415 (GCVE-0-2026-65415)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-15 15:12
VLAI
EPSS
VEX
Summary
A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.
Severity
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 15:12 UTC
CWE
- A local user may be able to cause unexpected system termination or read kernel memory
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65415",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T15:12:45.986053Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:12:53.547Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A local user may be able to cause unexpected system termination or read kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:40.841Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65415",
"datePublished": "2026-09-14T20:50:40.841Z",
"dateReserved": "2026-07-22T00:47:18.621Z",
"dateUpdated": "2026-09-15T15:12:53.547Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86893 (GCVE-0-2026-86893)
Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-17 16:55
VLAI
EPSS
VEX
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-17 16:55 UTC
CWE
- An app may be able to read device name
- CWE-269 - Improper Privilege Management
Assigner
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86893",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-17T16:55:04.689321Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-17T16:55:09.278Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to read device name",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-14T20:50:39.900Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86893",
"datePublished": "2026-09-14T20:50:39.900Z",
"dateReserved": "2026-09-08T16:43:41.872Z",
"dateUpdated": "2026-09-17T16:55:09.278Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}