Apple iOS The iOS Operating System used by iPhones.
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Apple iOS.
Recent Apple iOS Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 149230 | iOS 27.2 and iPadOS 27.2 - Apple Security Content | October 26, 2026 |
| 149225 | iOS 18.7.11 and iPadOS 18.7.11 - Apple Security Content | October 26, 2026 |
| 149227 | iOS 26.7.2 and iPadOS 26.7.2 - Apple Security Content | October 26, 2026 |
| 149226 | iOS 26.7.1 and iPadOS 26.7.1 - Apple Security Content | September 28, 2026 |
| 149034 | iOS 27 and iPadOS 27 - Apple Security Content | September 14, 2026 |
| 149041 | iOS 26.7 and iPadOS 26.7 - Apple Security Content | September 14, 2026 |
| 148282 | iOS 26.6.1 and iPadOS 26.6.1 - Apple Security Content | August 17, 2026 |
| 148287 | iOS 18.7.10 and iPadOS 18.7.10 - Apple Security Content | August 17, 2026 |
| 128066 | iOS 26.6 and iPadOS 26.6 - Apple Security Content | July 27, 2026 |
| 127594 | iOS 26.5.2 and iPadOS 26.5.2 - Apple Security Content | June 29, 2026 |
Known Exploited Apple iOS Vulnerabilities
The following Apple iOS vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| Apple iOS Type Confusion Vulnerability |
Apple iOS contains a type confusion vulnerability when processing maliciously crafted web content leading to code execution. CVE-2022-42856 Exploit Probability: 8.5% |
December 14, 2022 |
| Apple iOS Information Disclosure Vulnerability |
The Apple iOS kernel allows attackers to obtain sensitive information from memory via a crafted application. CVE-2016-4655 Exploit Probability: 33.4% |
May 24, 2022 |
| Apple iOS Memory Corruption Vulnerability |
A memory corruption vulnerability in Apple iOS kernel allows attackers to execute code in a privileged context or cause a denial-of-service via a crafted application. CVE-2016-4656 Exploit Probability: 23.6% |
May 24, 2022 |
| Apple iOS Webkit Memory Corruption Vulnerability |
WebKit in Apple iOS contains a memory corruption vulnerability which allows attackers to execute remote code or cause a denial-of-service via a crafted web site. CVE-2016-4657 Exploit Probability: 66.8% |
May 24, 2022 |
| Apple iOS Memory Corruption Vulnerability |
Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution. CVE-2019-7287 Exploit Probability: 4.6% |
May 23, 2022 |
| Apple iOS "FORCEDENTRY" Remote Code Execution Vulnerability |
An integer overflow was addressed with improved input validation vulnerability affecting iOS devices that allows for remote code execution. CVE-2021-30860 Exploit Probability: 76.0% |
November 3, 2021 |
| Apple WebKit Browser Engine Use-After-Free Vulnerability |
Use after free issue. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-30762 Exploit Probability: 11.0% |
November 3, 2021 |
| Apple iOS Privilege Escalation and Code Execution Chain |
A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-1782 Exploit Probability: 2.2% |
November 3, 2021 |
| Apple iOS Privilege Escalation and Code Execution Chain |
A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-1870 Exploit Probability: 7.7% |
November 3, 2021 |
| Apple iOS Privilege Escalation and Code Execution Chain |
A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-1871 Exploit Probability: 7.0% |
November 3, 2021 |
| Apple iOS Webkit Browser Engine XSS |
Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-1879 Exploit Probability: 7.1% |
November 3, 2021 |
| Apple iOS Webkit Storage Use-After-Free Remote Code Execution Vulnerability |
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-30661 Exploit Probability: 4.5% |
November 3, 2021 |
| Apple iOS12.x Buffer Overflow |
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-30666 Exploit Probability: 3.0% |
November 3, 2021 |
| Apple WebKit Browser Engine Memory Corruption Vulnerability |
Memory corruption issue. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-30761 Exploit Probability: 10.5% |
November 3, 2021 |
Of the known exploited vulnerabilities above, 2 are in the top 1%, or the 99th percentile of the EPSS exploit probability rankings. 5 known exploited Apple iOS vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.
Apple iOS EOL Dates
Ensure that you are using a supported version of Apple iOS. Here are some end of life, and end of support dates for Apple iOS.
| Release | EOL Date | Status |
|---|---|---|
| 27 | - |
Active
|
| 27 | - |
Active
|
| 26 | - |
Active
|
| 26 | - |
Active
|
| 18 | - |
Active
|
| 18 | - |
Active
|
| 17 | May 13, 2025 |
EOL
Apple iOS 17 became EOL in 2025 and supported ended in 2024 |
| 17 | May 13, 2025 |
EOL
Apple iOS 17 became EOL in 2025 and supported ended in 2024 |
| 16 | - |
Active
|
| 16 | - |
Active
|
| 15 | - |
Active
|
| 15 | - |
Active
|
| 14 | October 26, 2021 |
EOL
Apple iOS 14 became EOL in 2021 and supported ended in 2021 |
| 14 | October 26, 2021 |
EOL
Apple iOS 14 became EOL in 2021 and supported ended in 2021 |
| 13 | September 16, 2020 |
EOL
Apple iOS 13 became EOL in 2020 and supported ended in 2020 |
| 13 | September 16, 2020 |
EOL
Apple iOS 13 became EOL in 2020 and supported ended in 2020 |
| 12 | January 26, 2026 |
EOL
Apple iOS 12 became EOL in 2026 and supported ended in 2019 |
| 12 | January 26, 2026 |
EOL
Apple iOS 12 became EOL in 2026 and supported ended in 2019 |
| 11 | October 8, 2018 |
EOL
Apple iOS 11 became EOL in 2018 and supported ended in 2018 |
| 11 | October 8, 2018 |
EOL
Apple iOS 11 became EOL in 2018 and supported ended in 2018 |
By the Year
In 2026 there have been 529 vulnerabilities in Apple iOS with an average score of 6.6 out of ten. Last year, in 2025 iOS had 356 security vulnerabilities published. That is, 173 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.11.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 529 | 6.59 |
| 2025 | 356 | 6.48 |
| 2024 | 325 | 6.20 |
| 2023 | 273 | 6.77 |
| 2022 | 245 | 7.09 |
| 2021 | 383 | 6.93 |
| 2020 | 294 | 7.03 |
| 2019 | 354 | 7.76 |
| 2018 | 100 | 7.39 |
It may take a day or so for new iOS vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apple iOS Security Vulnerabilities
Apple OS State Mgmt Auth Flaw iOS/iPadOS/macOS/visionOS 27.2
CVE-2026-86925
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
AuthZ
Apple OS ImageProc Buffer Overflow (Heap Corruption) fixed 26.7.2
CVE-2026-84627
7.8 - High
- October 26, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption.
Memory Corruption
Apple iOS/iPadOS Audio Buffer Overflow (pre-27.2)
CVE-2026-86972
7.8 - High
- October 26, 2026
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
Classic Buffer Overflow
A use-after-free issue was addressed with improved memory management
CVE-2026-113904
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
An out-of-bounds write issue was addressed with improved input validation
CVE-2026-112456
7.8 - High
- October 26, 2026
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.
Memory Corruption
An input validation issue was addressed with improved input validation
CVE-2026-112682
7.5 - High
- October 26, 2026
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.
Improper Input Validation
Apple iOS/macOS buffer overflow in file parser fixed in 27.2
CVE-2026-86991
- October 26, 2026
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination.
Apple OS OOB Buffer Overflow (iOS/iPadOS/visionOS/watchOS) 27.2
CVE-2026-65385
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination.
Apple OS 27.2 Access Control Bypass via Restricted System Interfaces
CVE-2026-86968
- October 26, 2026
An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution.
An out-of-bounds read was addressed with improved bounds checking
CVE-2026-112476
7.5 - High
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Out-of-bounds Read
Apple iOS 27.2 Entitlement Check Authorization Bypass
CVE-2026-86987
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.
AuthZ
Apple OS: UAF Causing Kernel Corruption Fixed 26.7.227.2
CVE-2026-65350
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Apple iOS <26.7.2 Bluetooth Access w/o User Consent (Auth Issue)
CVE-2026-84493
- October 26, 2026
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent.
Apple Safari iOS UAF: Arbitrary Code Execution, Fixed in 27.2
CVE-2026-112637
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple iOS/macOS Out-of-Bounds Write (v<26.7.2)
CVE-2026-86969
- October 26, 2026
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Apple Safari UAF Crash before 27.2
CVE-2026-86986
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Apple iOS/iPadOS Camera Access Exploit (before 18.7.11/26.7.2/27.2)
CVE-2026-86990
- October 26, 2026
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user permission.
Apple WebKit OOB Read in Safari/OS 2627 Causes Crashes
CVE-2026-86973
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
OOB Write in Apple iOS/iPadOS/macOS Image Proc (Fixed 27/26.7.2)
CVE-2026-64750
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption.
Apple OS Sensitive Data Exposure 27.2
CVE-2026-86978
- October 26, 2026
This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data.
Apple OS OOB Read (<26.7.2) Fixed in 26.7.2/27
CVE-2026-86942
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to cause a denial-of-service.
Apple iOS 26.7/27.2 Memory Corruption Exploit Arbitrary Code Execution
CVE-2026-112688
8.8 - High
- October 26, 2026
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution.
Buffer Overflow
Apple OS Kernel OOB Write (iOS 27.2, iPadOS 27.2, macOS 27.2, visionOS 27.2)
CVE-2026-84494
- October 26, 2026
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
AOFU in Apple Safari/OS 27.2: Improper MemMgmt Causing Code Exec
CVE-2026-112626
8.8 - High
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Dangling pointer
Apple OS Image Decoding OOB Read fixed in iOS 27
CVE-2026-86954
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.
Out-of-bounds Read
Type confusion memory corruption in Safari <=27.1
CVE-2026-86974
- October 26, 2026
A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
Apple OS: UseAfterFree Crash/Kernel Write (iOS 26.7.2, macOS 27.2, ...)
CVE-2026-84495
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.
Apple iOS/macOS Auth Bypass (State Management) Fixed 27.2
CVE-2026-65397
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
AuthZ
A use-after-free issue was addressed with improved memory management
CVE-2026-112599
6.5 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
A memory integrity issue was addressed with improved handling of copy-on-write pages
CVE-2026-112576
6.5 - Medium
- October 26, 2026
A memory integrity issue was addressed with improved handling of copy-on-write pages. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected changes to copy-on-write memory.
TOCTTOU
This issue was addressed with improved data access restriction
CVE-2026-112628
5.5 - Medium
- October 26, 2026
This issue was addressed with improved data access restriction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data.
Information Disclosure
A race condition was addressed with improved state handling
CVE-2026-112501
6.2 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Race Condition
This issue was addressed with improved input validation
CVE-2026-112690
9.8 - Critical
- October 26, 2026
This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. A remote attacker may be able to break out of the WebContent sandbox.
Directory traversal
An out-of-bounds read was addressed with improved bounds checking
CVE-2026-112413
6.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected app termination.
Out-of-bounds Read
A race condition was addressed with improved locking
CVE-2026-112686
3.1 - Low
- October 26, 2026
A race condition was addressed with improved locking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process termination.
Race Condition
A race condition was addressed with improved state handling
CVE-2026-112669
6.5 - Medium
- October 26, 2026
A race condition was addressed with improved state handling. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
Race Condition
A use after free issue was addressed with improved memory management
CVE-2026-112517
7.7 - High
- October 26, 2026
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Dangling pointer
A path handling issue was addressed with improved validation
CVE-2026-112612
6.2 - Medium
- October 26, 2026
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.
Directory traversal
Authz flaw in Apple iOS 26.7.2/27 via state mgmt
CVE-2026-86920
5.5 - Medium
- October 26, 2026
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to access sensitive user data.
AuthZ
A use-after-free issue was addressed with improved memory management
CVE-2026-113901
4.3 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Dangling pointer
iOS/macOS Sandbox Breakout in pre-26.7.2
CVE-2026-65363
8.4 - High
- October 26, 2026
The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.
Authorization
A use-after-free issue was addressed with improved memory management
CVE-2026-112516
6.2 - Medium
- October 26, 2026
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Dangling pointer
This issue was addressed by removing the vulnerable code
CVE-2026-112687
5.5 - Medium
- October 26, 2026
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2. An attacker on the local network may be able to cause unexpected system termination or corrupt process memory.
Memory Corruption
An out-of-bounds write issue was addressed with improved input validation
CVE-2026-112691
6.2 - Medium
- October 26, 2026
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
Memory Corruption
A logic issue was addressed with improved restrictions
CVE-2026-112500
5.3 - Medium
- October 26, 2026
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. The user's original email address may be leaked when using the Hide My Email feature.
Information Disclosure
A logging issue was addressed with improved data redaction
CVE-2026-112432
6.2 - Medium
- October 26, 2026
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data.
Insertion of Sensitive Information into Log File
An out-of-bounds read was addressed with improved bounds checking
CVE-2026-112561
5.5 - Medium
- October 26, 2026
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
Out-of-bounds Read
Apple iOS 26.7.2/27 Lock Screen Contact Access via Physical Access
CVE-2026-84614
4.6 - Medium
- October 26, 2026
A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker with physical access may be able to access contacts from the lock screen.
Authorization
The issue was addressed with improved memory handling
CVE-2026-112454
8.2 - High
- October 26, 2026
The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
Buffer Overflow
A null pointer dereference was addressed with improved validation
CVE-2026-113906
6.5 - Medium
- October 26, 2026
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.
NULL Pointer Dereference
