Apple Software and Device Maker
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Apple product.
RSS Feeds for Apple security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Apple products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Apple Sorted by Most Security Vulnerabilities since 2018
Recent Apple Security Advisories
| Advisory | Title | Published |
|---|---|---|
| 148286 | Safari 26.6.1 - Apple Security Content | August 18, 2026 |
| 148287 | iOS 18.7.10 and iPadOS 18.7.10 - Apple Security Content | August 17, 2026 |
| 148282 | iOS 26.6.1 and iPadOS 26.6.1 - Apple Security Content | August 17, 2026 |
| 148281 | macOS Tahoe 26.6.2 - Apple Security Content | August 17, 2026 |
| 148170 | macOS Tahoe 26.6.1 - Apple Security Content | August 6, 2026 |
| 148171 | macOS Sequoia 15.7.9 - Apple Security Content | August 6, 2026 |
| 148172 | macOS Sonoma 14.8.9 - Apple Security Content | August 6, 2026 |
| 128071 | macOS Sequoia 15.7.8 - Apple Security Content | July 27, 2026 |
| 128073 | Safari 26.6 - Apple Security Content | July 27, 2026 |
| 128072 | macOS Sonoma 14.8.8 - Apple Security Content | July 27, 2026 |
Known Exploited Apple Vulnerabilities
The following Apple vulnerabilities have recently been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| Apple macOS Improper Authentication Vulnerability |
Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. CVE-2026-65400 |
August 18, 2026 |
| Apple Multiple Products Classic Buffer Overflow Vulnerability |
Apple watchOS, iOS, iPadOS, macOS, visionOS, tvOS, and iPadOS contain a classic buffer overflow vulnerability which could allow a malicious application to cause unexpected system termination or write kernel memory. CVE-2025-43520 Exploit Probability: 0.4% |
March 20, 2026 |
| Apple Multiple Products Improper Locking Vulnerability |
Apple watchOS, iOS, iPadOS, macOS, visionOS, and tvOS contain an improper locking vulnerability that could allow a malicious application to cause unexpected changes in memory shared between processes. CVE-2025-43510 Exploit Probability: 0.4% |
March 20, 2026 |
| Apple Multiple Products Buffer Overflow Vulnerability |
Apple Safari, iOS, watchOS, visionOS, iPadOS, macOS, and tvOS contain a buffer overflow vulnerability that could allow the processing of maliciously crafted web content which may lead to memory corruption. CVE-2025-31277 Exploit Probability: 1.5% |
March 20, 2026 |
| Apple Multiple products Use-After-Free Vulnerability |
Apple macOS, iOS, iPadOS, and Safari 16.6 contain a use-after-free vulnerability due to the processing of maliciously crafted web content that may lead to memory corruption. CVE-2023-43000 Exploit Probability: 3.9% |
March 5, 2026 |
| Apple iOS and iPadOS Use-After-Free Vulnerability |
Apple iOS and iPadOS contain a use-after-free vulnerability. An app may be able to execute arbitrary code with kernel privileges. CVE-2023-41974 Exploit Probability: 1.4% |
March 5, 2026 |
| Apple Multiple Products Integer Overflow or Wraparound Vulnerability |
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution. CVE-2021-30952 Exploit Probability: 7.0% |
March 5, 2026 |
| Apple Multiple Buffer Overflow Vulnerability |
Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow an attacker with memory write the capability to execute arbitrary code. CVE-2026-20700 Exploit Probability: 1.3% |
February 12, 2026 |
| Apple Multiple Products Use-After-Free WebKit Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain a use-after-free vulnerability in WebKit. Processing maliciously crafted web content may lead to memory corruption. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CVE-2025-43529 Exploit Probability: 8.8% |
December 15, 2025 |
| Apple Multiple Products Unspecified Vulnerability |
Apple macOS, iOS, tvOS, Safari, and watchOS contain an unspecified vulnerability in JavaScriptCore that when processing web content may lead to arbitrary code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. CVE-2022-48503 Exploit Probability: 3.2% |
October 20, 2025 |
| Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability |
Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework. CVE-2025-43300 Exploit Probability: 20.4% |
August 21, 2025 |
| Apple Multiple Products Unspecified Vulnerability |
Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link. CVE-2025-43200 Exploit Probability: 1.1% |
June 16, 2025 |
| Apple Multiple Products Memory Corruption Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file. CVE-2025-31200 Exploit Probability: 19.7% |
April 17, 2025 |
| Apple Multiple Products Arbitrary Read and Write Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication. CVE-2025-31201 Exploit Probability: 14.7% |
April 17, 2025 |
| Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability |
Apple iOS, iPadOS, macOS, and other Apple products contain an out-of-bounds write vulnerability in WebKit that may allow maliciously crafted web content to break out of Web Content sandbox. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CVE-2025-24201 Exploit Probability: 4.1% |
March 13, 2025 |
| Apple iOS and iPadOS Incorrect Authorization Vulnerability |
Apple iOS and iPadOS contains an incorrect authorization vulnerability that allows a physical attacker to disable USB Restricted Mode on a locked device. CVE-2025-24200 Exploit Probability: 4.4% |
February 12, 2025 |
| Apple Multiple Products Use-After-Free Vulnerability |
Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges. CVE-2025-24085 Exploit Probability: 17.3% |
January 29, 2025 |
| Apple Multiple Products Code Execution Vulnerability |
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution. CVE-2024-44308 Exploit Probability: 9.2% |
November 21, 2024 |
| Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability |
Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. CVE-2024-44309 Exploit Probability: 22.7% |
November 21, 2024 |
| Apple iOS and iPadOS Memory Corruption Vulnerability |
Apple iOS and iPadOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections. CVE-2024-23296 Exploit Probability: 1.4% |
March 6, 2024 |
5 known exploited Apple vulnerabilities are in the top 5% (95th percentile or greater) of the EPSS exploit probability rankings.
Top 10 Riskiest Apple Vulnerabilities
Based on the current exploit probability, these Apple vulnerabilities are on CISA's Known Exploited vulnerabilities list (KEV) and are ranked by the current EPSS exploit probability.
| Rank | CVE | EPSS | Vulnerability |
|---|---|---|---|
| 1 | CVE-2021-30860 | 76.0% | Apple iOS "FORCEDENTRY" Remote Code Execution Vulnerability |
| 2 | CVE-2021-30657 | 68.5% | Apple macOS Policy Subsystem Gatekeeper Bypass |
| 3 | CVE-2016-4657 | 63.6% | Apple iOS Webkit Memory Corruption Vulnerability |
| 4 | CVE-2023-32434 | 51.5% | Apple Multiple Products Integer Overflow Vulnerability |
| 5 | CVE-2014-4404 | 49.0% | Apple OS X Heap-Based Buffer Overflow Vulnerability |
| 6 | CVE-2016-4655 | 30.3% | Apple iOS Information Disclosure Vulnerability |
| 7 | CVE-2023-41993 | 29.2% | Apple Multiple Products WebKit Code Execution Vulnerability |
| 8 | CVE-2021-30807 | 28.8% | Apple iOS and macOS Memory Corruption Vulnerability |
| 9 | CVE-2023-28205 | 27.1% | Apple Multiple Products WebKit Use-After-Free Vulnerability |
| 10 | CVE-2023-28206 | 24.5% | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability |
By the Year
In 2026 there have been 559 vulnerabilities in Apple with an average score of 6.7 out of ten. Last year, in 2025 Apple had 757 security vulnerabilities published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Apple in 2026 could surpass last years number. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.15.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 559 | 6.69 |
| 2025 | 757 | 6.54 |
| 2024 | 628 | 6.30 |
| 2023 | 513 | 6.71 |
| 2022 | 464 | 7.06 |
| 2021 | 603 | 6.94 |
| 2020 | 502 | 6.89 |
| 2019 | 564 | 7.67 |
| 2018 | 226 | 7.33 |
It may take a day or so for new Apple vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apple Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-43679 | Aug 21, 2026 |
Apple Watch watchOS 26.4: Physical Access Contact DisclosureThis issue was addressed with improved permissions checking. This issue is fixed in watchOS 26.4. An attacker with physical access to a locked Apple Watch may be able to view user contacts. |
watchOS
|
| CVE-2026-20679 | Aug 21, 2026 |
Apple macOS Sequoia 15.7.5 / Sonoma 14.8.5 File CrashThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination. |
macOS
|
| CVE-2026-64773 | Aug 20, 2026 |
Apple Container Unbounded Forwarding Memory Leak Before 1.2.0An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0. |
|
| CVE-2026-43798 | Aug 20, 2026 |
Swift-NIO-SSH OOB Stack Write before 0.14.1A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1. |
iOS
|
| CVE-2026-43678 | Aug 20, 2026 |
swift-nio NIOWebSocket crash via 11-byte frame before 2.101.0An unauthenticated remote peer can crash any NIOWebSocket-based server (including Vapor and Hummingbird) with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0. |
Swift
|
| CVE-2026-64777 | Aug 20, 2026 |
Apple Container Builder <1.2.0: In-Context File DisclosureA malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0. |
|
| CVE-2026-65331 | Aug 17, 2026 |
Safari Crash from Malicious Web Content: iOS/iPadOS 18.7.10, 26.6.1; macOS Tahoe 26.6.2This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64760 | Aug 17, 2026 |
Apple iOS/iPadOS 18.7.10 Info Leak VulnerabilityAn information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state. |
iOS
iPadOS
Ios And Ipados
And others... |
| CVE-2026-43794 | Aug 17, 2026 |
Apple iOS memory corruption fixed 18.7.10A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65346 | Aug 17, 2026 |
Apple Image Processing Integer Overflow <26.6.0 Leading to A.C.E.An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65351 | Aug 17, 2026 |
Safari StateManagement Flaw Causing Unexpected Crash Before iOS 26.6.1This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64782 | Aug 17, 2026 |
Safari memory corruption CVE-2026-64782 fixed in iOS 18.7.10A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65347 | Aug 17, 2026 |
Apple iOS Fixed Image DoS in 26.6.1The issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43795 | Aug 17, 2026 |
Apple Safari Crash via Malformed Web Content (Fixed v 18.7.10/26.6.2)The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65330 | Aug 17, 2026 |
Memory Handling Flaw in Apple iOS 26.6.1/iPadOS 26.6.1, macOS Tahoe 26.6.2The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65340 | Aug 17, 2026 |
Safari Crash via Malicious Web Content (Fixed in iOS 18.7.10 & macOS 26.6.2)This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65337 | Aug 17, 2026 |
Safari Crash via Malicious Web Content iOS 18.7.10This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64788 | Aug 17, 2026 |
Apple iOS/iPadOS/macOS Memory Corruption via Malicious Web Content (Fixed in 26.6.1/2)The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65336 | Aug 17, 2026 |
Apple Safari crash via malformed web content (before 26.6.2)This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64784 | Aug 17, 2026 |
Apple Safari OOB Buffer Crash before iOS 18.7.10 / macOS 26.6.2An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65341 | Aug 17, 2026 |
Apple iOS Mem Corruption via Malicious Web Content (Fixed in iOS 18.7.10)The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-28984 | Aug 17, 2026 |
Safari Crash on iOS 18.7.10 Fixed: Improved Memory HandlingThe issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
Ios And Ipados
And others... |
| CVE-2026-64787 | Aug 17, 2026 |
Use-after-Free in Apple WK Causing Crash iOS 26.6.1/iPadOS 26.6.1 macOS 26.6.2A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65339 | Aug 17, 2026 |
Apple iOS/iPadOS Sensitive Data Leak in 26.6.1 - Fixed in 26.6.1, macOS 26.6.2A logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to leak sensitive user information. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65335 | Aug 17, 2026 |
Safari Web Crash via Malicious Content (Fixed in iOS 18.7.10, macOS 26.6.2)This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65334 | Aug 17, 2026 |
Apple Safari memory corruption on iOS <18.7.10 (crash via malicious web)A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65338 | Aug 17, 2026 |
Safari WebKit crash via memory bug, fixed iOS 18.7.10The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65343 | Aug 17, 2026 |
Apple iOS/iPadOS UAF fixed in 26.6.1, macOS in 26.6.2A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65333 | Aug 17, 2026 |
Apple Safari Crash via Malicious Web Content (before 18.7.10)This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64778 | Aug 17, 2026 |
Apple iOS/iPadOS/macOS Data Leak via Malicious Site Before 18.7.10/26.6.1The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Visiting a maliciously crafted website may leak sensitive data. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-43667 | Aug 17, 2026 |
Denial of Service via Input Validation in iOS/iPadOS before 18.7.10A reachable assertion was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An attacker in a privileged network position may be able to cause a denial-of-service. |
iOS
iPadOS
Ios And Ipados
And others... |
| CVE-2026-64781 | Aug 17, 2026 |
Apple Safari Crash via Malicious Web Content (pre iOS 18.7.10)The issue was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64715 | Aug 17, 2026 |
Apple OS UseAfterFree in WebKit Fixed iOS 18.7.10, macOS 26.6.2A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected process crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65329 | Aug 17, 2026 |
iOS/iPadOS 26.6.1 IPSec Auth Bypass VulnerabilityAn authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic. |
iOS
iPadOS
Ios And Ipados
And others... |
| CVE-2026-64780 | Aug 17, 2026 |
Safari iOS/iPadOS/macOS Crash from Malicious Web Content Fixed in 26.6.1The issue was addressed with improved checks. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64779 | Aug 17, 2026 |
Apple Safari CVE-2026-64779 fixed in iOS 18.7.10 & macOS 26.6.2A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65332 | Aug 17, 2026 |
Apple Safari Crash via Malicious Web Fixed iOS 18.7.10/PadOS 18.7.10/iOS26.6.1This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65349 | Aug 17, 2026 |
Apple iOS 26.6.1, iPadOS 26.6.1 & macOS 26.6.2: Out-of-Bounds Kernel Read FixedAn out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-65370 | Aug 12, 2026 |
ServiceTalk HTTP/1.x TransferEncoding smuggling, fixed 0.42.65ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks. This vulnerability is addressed in servicetalk version 0.42.65. |
|
| CVE-2026-65400 | Aug 06, 2026 |
macOS Screen Sharing Auth Bypass before 15.7.9/Sonoma 14.8.9/Tahoe 26.6.1An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate to Screen Sharing without valid credentials. |
macOS
Macos Sonoma
|
| CVE-2026-43757 | Jul 27, 2026 |
Out-of-Bounds Read in macOS (Sequoia/Sonoma/Tahoe) Up To 15.7.8/14.8.8/26.6An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination. |
macOS
Macos Sonoma
iOS
And others... |
| CVE-2026-64737 | Jul 27, 2026 |
macOS Authorization & Sandbox Break Fix (Sequoia, Sonoma)An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox. |
macOS
Macos Sonoma
|
| CVE-2026-43782 | Jul 27, 2026 |
macOS App Data Access Vulnerability (Fixed in Sequoia 15.7.8)This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to access sensitive user data. |
macOS
Macos Sonoma
|
| CVE-2026-39873 | Jul 27, 2026 |
Memory Handling Leak in macOS SMB Client Causes System Termination (Pre15.7/14.8/26.6)The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious SMB server may lead to unexpected system termination. |
macOS
Macos Sonoma
|
| CVE-2026-43805 | Jul 27, 2026 |
Apple OS Race Condition Enables Kernel Write fixed in iOS 26.6, macOS 15.7.8A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64776 | Jul 27, 2026 |
macOS kernel memory disclosure via bounds check flaw (before Sequoia 15.7.8)The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory. |
macOS
Macos Sonoma
|
| CVE-2026-43813 | Jul 27, 2026 |
iOS/macOS Code Signing Bypass (CVE-2026-43813) Fixed in 26.6A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-64721 | Jul 27, 2026 |
Apple OS State Management Data Leak (CVE-2026-64721) - fixed in 26.6This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data. |
iOS
iPadOS
macOS
And others... |
| CVE-2026-20672 | Jul 27, 2026 |
macOS Info Disclosure Vulnerability Fixed in Sequoia 15.7.8 & Sonoma 14.8.8An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.3. An app may be able to access sensitive user data. |
macOS
Macos Sonoma
|
| CVE-2026-64740 | Jul 27, 2026 |
Apple OS Sandbox Escape via Path Validation (iOS 26.6, macOS Sequoia 15.7.8)A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox. |
iOS
iPadOS
macOS
And others... |