Apple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-86950 1Apple 3Ipados Iphone OsMacos Oct 1, 2026 Sep 28, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to a...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.Show less
CVE-2026-86924 1Apple 3Ipados Iphone OsMacos Sep 18, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may...Show more A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.Show less
CVE-2026-86917 1Apple 1Macos Sep 15, 2026 Sep 14, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.
CVE-2026-86911 1Apple 1Macos Sep 18, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts.
CVE-2026-86910 1Apple 1Macos Sep 18, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files.
CVE-2026-86909 1Apple 1Macos Sep 18, 2026 Sep 14, 2026 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks.
CVE-2026-86905 1Apple 4Ipados Iphone OsMacos+1 more Sep 16, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain.
CVE-2026-86904 1Apple 3Ipados Iphone OsWatchos Sep 16, 2026 Sep 14, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permissi...Show more A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission.Show less
CVE-2026-86903 1Apple 6Ipados Iphone OsMacos+3 more Sep 16, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.
CVE-2026-86902 1Apple 1Macos Sep 18, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data.
CVE-2026-86901 1Apple 1Macos Sep 18, 2026 Sep 14, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory...Show more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.Show less
CVE-2026-86900 1Apple 1Macos Sep 18, 2026 Sep 14, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory...Show more An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure.Show less
CVE-2026-86898 1Apple 5Ipados Iphone OsMacos+2 more Sep 18, 2026 Sep 14, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal c...Show more A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.Show less
CVE-2026-86897 1Apple 5Ipados Iphone OsMacos+2 more Sep 18, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive use...Show more This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to access sensitive user data.Show less
CVE-2026-86895 1Apple 5Ipados Iphone OsTvos+2 more Sep 16, 2026 Sep 14, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...Show more An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.Show less
CVE-2026-86894 1Apple 1Macos Sep 16, 2026 Sep 14, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.
CVE-2026-86893 1Apple 5Ipados Iphone OsTvos+2 more Sep 18, 2026 Sep 14, 2026 N/A· v4 3.3 LOW· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.
CVE-2026-86892 1Apple 3Ipados Iphone OsVisionos Sep 18, 2026 Sep 14, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to cause a denial-of-service.
CVE-2026-86891 1Apple 2Macos Watchos Sep 18, 2026 Sep 14, 2026 N/A· v4 3.5 LOW· v3 N/A· v2 An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device informatio...Show more An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information.Show less
CVE-2026-86890 1Apple 2Ipados Iphone Os Sep 16, 2026 Sep 14, 2026 N/A· v4 4.6 MEDIUM· v3 N/A· v2 A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information.

12 3 4 5...458 Next