Apple Software and Device Maker

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Apple product.

RSS Feeds for Apple security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Apple products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Apple Sorted by Most Security Vulnerabilities since 2018

Apple macOS4499 vulnerabilities
Macintosh Operating System

Apple iOS3056 vulnerabilities
The iOS Operating System used by iPhones.

Apple iPadOS2380 vulnerabilities
Apple iPad Operating System

Apple watchOS1816 vulnerabilities
Apple Watch Operating System

Apple tvOS1810 vulnerabilities
Apple TV Operating System

Apple Ios And Ipados1456 vulnerabilities

Apple visionOS866 vulnerabilities

Apple Safari774 vulnerabilities

Apple iPadOS569 vulnerabilities
Apple iPad Operating System

Apple Macos Sonoma372 vulnerabilities

Apple iTunes247 vulnerabilities
Apple iTunes Software

Apple iCloud207 vulnerabilities

Apple Xcode71 vulnerabilities

Apple Swift20 vulnerabilities

Apple Music11 vulnerabilities

Apple Garageband8 vulnerabilities

Apple Carplay2 vulnerabilities

Apple AirPods2 vulnerabilities
Apple AirPods Firmware and Hardware

Apple AirPlay2 vulnerabilities

Apple Macos Monterey1 vulnerability

Apple Macos Ventura1 vulnerability

Apple Magic Keyboard1 vulnerability

Apple Compressor1 vulnerability

Apple Securerom1 vulnerability

Apple Smart Card Services1 vulnerability

Apple App Store Connect1 vulnerability

Recent Apple Security Advisories

Advisory	Title	Published
149723	watchOS 26.6.1 - Apple Security Content	November 9, 2026
149724	visionOS 27.2.1 - Apple Security Content	November 9, 2026
149719	macOS Tahoe 26.7.3 - Apple Security Content	November 9, 2026
149720	macOS Sequoia 15.8.3 - Apple Security Content	November 9, 2026
149718	macOS Golden Gate 27.2.1 - Apple Security Content	November 9, 2026
149716	iOS 26.7.3 and iPadOS 26.7.3 - Apple Security Content	November 9, 2026
149717	iOS 18.7.12 and iPadOS 18.7.12 - Apple Security Content	November 9, 2026
149715	iOS 27.2.1 and iPadOS 27.2.1 - Apple Security Content	November 9, 2026
149722	watchOS 27.2.1 - Apple Security Content	November 9, 2026
149589	Xcode 27.2 - Apple Security Content	October 29, 2026

Known Exploited Apple Vulnerabilities

The following Apple vulnerabilities have recently been marked by CISA as Known to be Exploited by threat actors.

Title	Description	Added
Apple Multiple Products Improper Authentication Vulnerability	Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication. CVE-2024-27834 Exploit Probability: 1.5%	November 4, 2026
Apple Multiple Products Out-of-Bounds Write Vulnerability	Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution. CVE-2026-86950 Exploit Probability: 26.2%	September 29, 2026
Apple macOS Improper Authentication Vulnerability	Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. CVE-2026-65400 Exploit Probability: 18.1%	August 18, 2026
Apple Multiple Products Classic Buffer Overflow Vulnerability	Apple watchOS, iOS, iPadOS, macOS, visionOS, tvOS, and iPadOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory. CVE-2025-43520 Exploit Probability: 0.4%	March 20, 2026
Apple Multiple Products Improper Locking Vulnerability	Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. CVE-2025-43510 Exploit Probability: 0.4%	March 20, 2026
Apple Multiple Products Buffer Overflow Vulnerability	Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. CVE-2025-31277 Exploit Probability: 1.7%	March 20, 2026
Apple Multiple products Use-After-Free Vulnerability	Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption. CVE-2023-43000 Exploit Probability: 4.0%	March 5, 2026
Apple iOS and iPadOS Use-After-Free Vulnerability	Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. CVE-2023-41974 Exploit Probability: 2.0%	March 5, 2026
Apple Multiple Products Integer Overflow or Wraparound Vulnerability	Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution. CVE-2021-30952 Exploit Probability: 7.0%	March 5, 2026
Apple Multiple Buffer Overflow Vulnerability	Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code. CVE-2026-20700 Exploit Probability: 1.7%	February 12, 2026
Apple Multiple Products Use-After-Free WebKit Vulnerability	Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CVE-2025-43529 Exploit Probability: 25.7%	December 15, 2025
Apple Multiple Products Unspecified Vulnerability	Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2022-48503 Exploit Probability: 3.2%	October 20, 2025
Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability	Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. CVE-2025-43300 Exploit Probability: 63.2%	August 21, 2025
Apple Multiple Products Unspecified Vulnerability	Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link. CVE-2025-43200 Exploit Probability: 1.2%	June 16, 2025
Apple Multiple Products Memory Corruption Vulnerability	Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file. CVE-2025-31200 Exploit Probability: 20.9%	April 17, 2025
Apple Multiple Products Arbitrary Read and Write Vulnerability	Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication. CVE-2025-31201 Exploit Probability: 14.0%	April 17, 2025
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability	Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CVE-2025-24201 Exploit Probability: 3.8%	March 13, 2025
Apple iOS and iPadOS Incorrect Authorization Vulnerability	Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device. CVE-2025-24200 Exploit Probability: 4.5%	February 12, 2025
Apple Multiple Products Use-After-Free Vulnerability	Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges. CVE-2025-24085 Exploit Probability: 17.4%	January 29, 2025
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability	Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. CVE-2024-44309 Exploit Probability: 21.9%	November 21, 2024

The vulnerability CVE-2025-43300: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability is in the top 1% of the currently known exploitable vulnerabilities. 7 known exploited Apple vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.

Top 10 Riskiest Apple Vulnerabilities

Based on the current exploit probability, these Apple vulnerabilities are on CISA's Known Exploited vulnerabilities list (KEV) and are ranked by the current EPSS exploit probability.

Rank	CVE	EPSS	Vulnerability
1	CVE-2021-30860	76.0%	Apple iOS "FORCEDENTRY" Remote Code Execution Vulnerability
2	CVE-2021-30657	68.5%	Apple macOS Policy Subsystem Gatekeeper Bypass
3	CVE-2016-4657	66.8%	Apple iOS Webkit Memory Corruption Vulnerability
4	CVE-2025-43300	63.2%	Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
5	CVE-2023-32434	58.2%	Apple Multiple Products Integer Overflow Vulnerability
6	CVE-2023-41064	53.4%	Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
7	CVE-2014-4404	48.9%	Apple OS X Heap-Based Buffer Overflow Vulnerability
8	CVE-2016-4655	33.4%	Apple iOS Information Disclosure Vulnerability
9	CVE-2021-30807	28.8%	Apple iOS and macOS Memory Corruption Vulnerability
10	CVE-2023-28205	27.1%	Apple Multiple Products WebKit Use-After-Free Vulnerability

By the Year

In 2026 there have been 1196 vulnerabilities in Apple with an average score of 6.5 out of ten. Last year, in 2025 Apple had 757 security vulnerabilities published. That is, 439 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.02

Year	Vulnerabilities	Average Score
2026	1196	6.51
2025	757	6.54
2024	628	6.29
2023	514	6.71
2022	464	7.07
2021	603	6.91
2020	502	6.94
2019	565	7.66
2018	227	7.33

It may take a day or so for new Apple vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Apple Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-113971	Nov 09, 2026	Apple iOS/iPadOS lockscreen AirPlay pairing bypass (fixed in 18.7.12, 26.5) This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.5 and iPadOS 26.5. An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen.	iOS iPadOS Ios And Ipados And others...
CVE-2026-113969	Nov 09, 2026	Apple AirPlay Pairing RateLimit Bypass (fixed in iOS/macOS 18.7.12) A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker on the same network may be able to bypass the rate limit on AirPlay pairing code attempts.	iOS iPadOS macOS And others...
CVE-2026-113970	Nov 09, 2026	Apple iOS/iPadOS Bluetooth UAF before 18.7.12 (CVE-2026-113970) A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to corrupt process memory.	iOS iPadOS macOS And others...
CVE-2026-113968	Nov 09, 2026	Apple iOS/iPadOS BT Pairing Rate-Limit Bypass (18.7.12) A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts.	iOS iPadOS macOS And others...
CVE-2026-113961	Nov 09, 2026	Apple iOS/iMessage Auth Bypass before 26.7.3 An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A remote attacker may be able to join an iMessage group chat and receive its messages.	iOS iPadOS macOS And others...
CVE-2026-113964	Nov 09, 2026	Apple iOS/iPadOS Bluetooth Pairing RateLimit Bypass before 18.7.12 A logic issue was addressed with improved state management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction.	iOS iPadOS macOS And others...
CVE-2026-113965	Nov 09, 2026	Apple iOS Bluetooth Pairing Bypass (pre18.7.12) This issue was addressed with improved checks. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 26.6.1, watchOS 27.2.1. A malicious Bluetooth device may be able to establish a pairing without user interaction.	iOS iPadOS macOS And others...
CVE-2026-113963	Nov 09, 2026	Apple iOS/iPadOS/visionOS/watchOS Auth Bypass (state mgmt) before 27.2.1 An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2.1 and iPadOS 27.2.1, visionOS 27.2.1, watchOS 27.2.1. An app may be able to access sensitive user data.	iOS iPadOS watchOS And others...
CVE-2026-113960	Nov 09, 2026	Apple iMessage prejoin message disclosure (iOS/iPadOS <27.2.1) This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.1, watchOS 27.2.1. A user added to an iMessage group may be able to access messages sent before they joined.	iOS iPadOS macOS And others...
CVE-2026-112605	Oct 30, 2026	Xcode before 27.2 symlink handling leads to arbitrary file read This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.	Xcode
CVE-2026-112602	Oct 30, 2026	Apple Xcode <27.2 Authorization Bypass via State Mgmt An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.	Xcode
CVE-2026-113957	Oct 29, 2026	Apple Container 1.6.0 Digest Pull Spoof (CVE-2026-113957) An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1.
CVE-2026-86983	Oct 28, 2026	Apple Swift-Crypto 5.0.3 VOPRF Input Length Bypass A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.	Swift
CVE-2026-86925	Oct 26, 2026	Apple OS State Mgmt Auth Flaw iOS/iPadOS/macOS/visionOS 27.2 An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.	Ios And Ipados macOS visionOS And others...
CVE-2026-113945	Oct 26, 2026	Apple macOS Golden Gate 27.2 OOB Read Leading to Crash An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.	macOS
CVE-2026-84627	Oct 26, 2026	Apple OS ImageProc Buffer Overflow (Heap Corruption) fixed 26.7.2 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption.	Ios And Ipados macOS visionOS And others...
CVE-2026-112529	Oct 26, 2026	macOS kernel OOB read (fixed in 27.2, 15.8.2, 26.7.2) An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.	macOS
CVE-2026-65327	Oct 26, 2026	Privilege Elevation in macOS Golden Gate 27.2 via Logic Issue A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.	macOS
CVE-2026-86972	Oct 26, 2026	Apple iOS/iPadOS Audio Buffer Overflow (pre-27.2) A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.	Ios And Ipados macOS tvOS And others...
CVE-2026-112483	Oct 26, 2026	macOS FS path validation flaw (pre27.2, 15.8.2, 26.7.2) A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.	macOS
CVE-2026-113912	Oct 26, 2026	Apple iOS/iPadOS/macOS OOB Media Parsing Bug (fixed in 26.7, 27.2) An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.	iOS iPadOS macOS And others...
CVE-2026-112495	Oct 26, 2026	Apple macOS OOB Read in Kernel (fixed in 15.8.2, 26.7.2, 27.2) An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.	macOS
CVE-2026-86964	Oct 26, 2026	Apple OS null deref before v27 causing crash A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.	Ios And Ipados macOS tvOS And others...
CVE-2026-113904	Oct 26, 2026	Apple Safari/WebKit Use-After-Free before 27.2 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.	iOS iPadOS macOS And others...
CVE-2026-112616	Oct 26, 2026	Apple iOS/iPadOS/macOS/visionOS access control bypass before 27.2 An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.	iOS iPadOS macOS And others...
CVE-2026-112568	Oct 26, 2026	Apple macOS Gatekeeper bypass before 27.2 (logic issue) A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks.	macOS
CVE-2026-112704	Oct 26, 2026	Apple macOS Sandbox Escape Info Leak fixed in 27.2, 15.8.2, 26.7.2 An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.	macOS
CVE-2026-112456	Oct 26, 2026	Apple iOS/macOS OOB Write (Heap Corruption) Fixed in 26.7.2/27.2 An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.	iOS iPadOS macOS And others...
CVE-2026-112513	Oct 26, 2026	Apple macOS Golden Gate 27.2 symlink validation sandbox escape This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox.	macOS
CVE-2026-112544	Oct 26, 2026	Apple macOS Golden Gate 27.2 OOB Write in Disk Image Mount An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination.	macOS
CVE-2026-112682	Oct 26, 2026	Apple iOS/iPadOS Input Validation Flaw (pre26.7.2) App Termination An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.	iOS iPadOS macOS And others...
CVE-2026-112417	Oct 26, 2026	visionOS < 27.2 Integer Overflow via Malicious 3D Model An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.	visionOS
CVE-2026-112552	Oct 26, 2026	macOS OOB Write in kernel (pre Golden Gate 27.2, Sequoia 15.8.2, Tahoe 26.7.2) An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination.	macOS
CVE-2026-112505	Oct 26, 2026	macOS Screen Sharing OOB Write before 27.2/15.8.2/26.7.2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to corrupt process memory.	macOS
CVE-2026-113949	Oct 26, 2026	Apple Safari type confusion (pre-27.2) leading to memory corruption A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.	iOS iPadOS macOS And others...
CVE-2026-86929	Oct 26, 2026	macOS OOB Write (pre 27, 15.8.2, 26.7.2) - Arbitrary Exec An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.	macOS
CVE-2026-112437	Oct 26, 2026	Apple macOS before 27.2/15.8.2/26.7.2: Privilege Escalation A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.	macOS
CVE-2026-112525	Oct 26, 2026	Apple macOS kernel OOB read before 15.8.2, 26.7.2, 27.2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.	macOS
CVE-2026-86991	Oct 26, 2026	Apple iOS/macOS buffer overflow in file parser fixed in 27.2 A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination.	Ios And Ipados macOS visionOS And others...
CVE-2026-65385	Oct 26, 2026	Apple OS OOB Buffer Overflow (iOS/iPadOS/visionOS/watchOS) 27.2 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination.	Ios And Ipados visionOS watchOS And others...
CVE-2026-113908	Oct 26, 2026	Apple iOS/iPadOS 27.2 Sensitive Data Exposure Fixed A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.	iOS iPadOS Ios And Ipados And others...
CVE-2026-86968	Oct 26, 2026	Apple OS 27.2 Access Control Bypass via Restricted System Interfaces An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution.	Ios And Ipados macOS visionOS And others...
CVE-2026-112533	Oct 26, 2026	Apple macOS Auth Bypass (pre27.2/15.8.2/26.7.2) State Mgmt Flaw An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.	macOS
CVE-2026-112476	Oct 26, 2026	Apple iOS/macOS OOB Read Fixed in 26.7.2, 27.2, 15.8.2 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.	iOS iPadOS macOS And others...
CVE-2026-86987	Oct 26, 2026	Apple iOS 27.2 Entitlement Check Authorization Bypass An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.	Ios And Ipados iOS iPadOS And others...
CVE-2026-112708	Oct 26, 2026	Apple macOS race condition before 27.2, 15.8.2, 26.7.2 A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.	macOS
CVE-2026-112421	Oct 26, 2026	macOS symlink race condition (fixed in 15.8.2, 26.7.2, 27.2) A race condition was addressed with improved handling of symbolic links. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.	macOS
CVE-2026-43736	Oct 26, 2026	Auth flaw in macOS state mgmt (pre-Golden Gate 27/Tahoe 26.7.2) An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.	macOS
CVE-2026-112548	Oct 26, 2026	macOS UAF root privilege escalation fixed in 27.2/15.8.2/26.7.2 A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.	macOS
CVE-2026-112677	Oct 26, 2026	Apple macOS Authorization Bypass (Arb Code) before 27.2, 15.8.2, 26.7.2 An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An application may be able to execute arbitrary code with system privileges.	macOS