← Back

CVE-2026-65398

nvd nist
Published: Sep 14, 2026Modified: Sep 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected (6)

Apple
6 products
Ipados
Iphone Os
Macos
Tvos
Visionos
Watchos
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ipados
version < 27.0
Iphone Os
version < 27.0
Macos
version < 27.0
Tvos
version < 27.0
Visionos
version < 27.0
Watchos
version < 27.0

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (5)

Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Vendor Advisory
Source: product-security@apple.com
Vendor Advisory

Timeline

No history available yet.