Refine your search
3944 vulnerabilities found for macOS by Apple
CERTFR-2026-AVI-1387
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.
Apple indique que la vulnérabilité CVE-2026-86950 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Apple | visionOS | visionOS versions antérieures à 27.2 | ||
| Apple | macOS | macOS Golden Gate versions antérieures à 27.2 | ||
| Apple | iPadOS | iPadOS versions antérieures à 26.7.2 | ||
| Apple | iPadOS | iPadOS versions antérieures à 27.2 | ||
| Apple | macOS | macOS Tahoe versions antérieures à 26.7.2 | ||
| Apple | iPadOS | iPadOS versions antérieures à 18.7.11 | ||
| Apple | macOS | macOS Sequoia versions antérieures à 15.8.2 | ||
| Apple | Safari | Safari versions antérieures à 27.2 | ||
| Apple | iOS | iOS versions antérieures à 18.7.11 | ||
| Apple | iOS | iOS versions antérieures à 27.2 | ||
| Apple | watchOS | watchOS versions antérieures à 27.2 | ||
| Apple | tvOS | tvOS versions antérieures à 27.2 | ||
| Apple | iOS | iOS versions antérieures à 26.7.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "visionOS versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "visionOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Golden Gate versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 26.7.2",
"product": {
"name": "iPadOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "iPadOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.7.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iPadOS versions ant\u00e9rieures \u00e0 18.7.11",
"product": {
"name": "iPadOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.8.2",
"product": {
"name": "macOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "Safari versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "Safari",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 18.7.11",
"product": {
"name": "iOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "iOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "watchOS versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "watchOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "tvOS versions ant\u00e9rieures \u00e0 27.2",
"product": {
"name": "tvOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
},
{
"description": "iOS versions ant\u00e9rieures \u00e0 26.7.2",
"product": {
"name": "iOS",
"vendor": {
"name": "Apple",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-112483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112483"
},
{
"name": "CVE-2026-112566",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112566"
},
{
"name": "CVE-2026-84539",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84539"
},
{
"name": "CVE-2026-112669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112669"
},
{
"name": "CVE-2026-112453",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112453"
},
{
"name": "CVE-2026-112695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112695"
},
{
"name": "CVE-2026-84498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84498"
},
{
"name": "CVE-2026-86920",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86920"
},
{
"name": "CVE-2026-86986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86986"
},
{
"name": "CVE-2026-112486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112486"
},
{
"name": "CVE-2026-86958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86958"
},
{
"name": "CVE-2019-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-5598"
},
{
"name": "CVE-2026-112651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112651"
},
{
"name": "CVE-2026-113948",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113948"
},
{
"name": "CVE-2026-112515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112515"
},
{
"name": "CVE-2026-112425",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112425"
},
{
"name": "CVE-2026-113937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113937"
},
{
"name": "CVE-2026-112659",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112659"
},
{
"name": "CVE-2026-84495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84495"
},
{
"name": "CVE-2026-112704",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112704"
},
{
"name": "CVE-2026-113897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113897"
},
{
"name": "CVE-2026-65384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65384"
},
{
"name": "CVE-2026-86896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86896"
},
{
"name": "CVE-2026-112551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112551"
},
{
"name": "CVE-2026-112606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112606"
},
{
"name": "CVE-2026-112563",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112563"
},
{
"name": "CVE-2026-112612",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112612"
},
{
"name": "CVE-2026-113907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113907"
},
{
"name": "CVE-2026-113914",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113914"
},
{
"name": "CVE-2026-112523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112523"
},
{
"name": "CVE-2026-84627",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84627"
},
{
"name": "CVE-2026-112474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112474"
},
{
"name": "CVE-2026-112513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112513"
},
{
"name": "CVE-2026-112417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112417"
},
{
"name": "CVE-2026-112614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112614"
},
{
"name": "CVE-2026-112658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112658"
},
{
"name": "CVE-2026-112571",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112571"
},
{
"name": "CVE-2026-112647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112647"
},
{
"name": "CVE-2026-112434",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112434"
},
{
"name": "CVE-2026-113912",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113912"
},
{
"name": "CVE-2026-112654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112654"
},
{
"name": "CVE-2026-112478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112478"
},
{
"name": "CVE-2026-86985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86985"
},
{
"name": "CVE-2026-112529",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112529"
},
{
"name": "CVE-2026-112430",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112430"
},
{
"name": "CVE-2026-112507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112507"
},
{
"name": "CVE-2026-112707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112707"
},
{
"name": "CVE-2026-112652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112652"
},
{
"name": "CVE-2026-84496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84496"
},
{
"name": "CVE-2026-112696",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112696"
},
{
"name": "CVE-2026-112446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112446"
},
{
"name": "CVE-2026-113945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113945"
},
{
"name": "CVE-2026-112599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112599"
},
{
"name": "CVE-2026-112482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112482"
},
{
"name": "CVE-2026-112487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112487"
},
{
"name": "CVE-2026-112495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112495"
},
{
"name": "CVE-2026-65385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65385"
},
{
"name": "CVE-2026-86978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86978"
},
{
"name": "CVE-2026-112625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112625"
},
{
"name": "CVE-2026-112689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112689"
},
{
"name": "CVE-2026-65392",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65392"
},
{
"name": "CVE-2026-112556",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112556"
},
{
"name": "CVE-2026-112502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112502"
},
{
"name": "CVE-2026-112455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112455"
},
{
"name": "CVE-2026-112484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112484"
},
{
"name": "CVE-2026-113950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113950"
},
{
"name": "CVE-2026-112678",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112678"
},
{
"name": "CVE-2026-112708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112708"
},
{
"name": "CVE-2026-112559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112559"
},
{
"name": "CVE-2026-112701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112701"
},
{
"name": "CVE-2026-86991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86991"
},
{
"name": "CVE-2026-112473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112473"
},
{
"name": "CVE-2026-112616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112616"
},
{
"name": "CVE-2026-112485",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112485"
},
{
"name": "CVE-2026-84528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84528"
},
{
"name": "CVE-2026-113939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113939"
},
{
"name": "CVE-2026-113944",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113944"
},
{
"name": "CVE-2026-86945",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86945"
},
{
"name": "CVE-2026-112560",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112560"
},
{
"name": "CVE-2026-112568",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112568"
},
{
"name": "CVE-2026-84599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84599"
},
{
"name": "CVE-2026-112620",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112620"
},
{
"name": "CVE-2026-112543",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112543"
},
{
"name": "CVE-2026-84545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84545"
},
{
"name": "CVE-2026-112525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112525"
},
{
"name": "CVE-2026-86990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86990"
},
{
"name": "CVE-2026-112532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112532"
},
{
"name": "CVE-2026-113947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113947"
},
{
"name": "CVE-2026-112705",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112705"
},
{
"name": "CVE-2026-112428",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112428"
},
{
"name": "CVE-2026-112533",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112533"
},
{
"name": "CVE-2026-43736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43736"
},
{
"name": "CVE-2026-112653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112653"
},
{
"name": "CVE-2026-86988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86988"
},
{
"name": "CVE-2026-86989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86989"
},
{
"name": "CVE-2026-112462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112462"
},
{
"name": "CVE-2026-112492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112492"
},
{
"name": "CVE-2026-113943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113943"
},
{
"name": "CVE-2026-112626",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112626"
},
{
"name": "CVE-2026-86941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86941"
},
{
"name": "CVE-2026-112413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112413"
},
{
"name": "CVE-2026-86880",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86880"
},
{
"name": "CVE-2026-112514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112514"
},
{
"name": "CVE-2026-112640",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112640"
},
{
"name": "CVE-2026-112511",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112511"
},
{
"name": "CVE-2026-112685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112685"
},
{
"name": "CVE-2026-113898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113898"
},
{
"name": "CVE-2026-112618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112618"
},
{
"name": "CVE-2026-86987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86987"
},
{
"name": "CVE-2026-86931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86931"
},
{
"name": "CVE-2026-112577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112577"
},
{
"name": "CVE-2026-112481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112481"
},
{
"name": "CVE-2026-113908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113908"
},
{
"name": "CVE-2026-112622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112622"
},
{
"name": "CVE-2026-112542",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112542"
},
{
"name": "CVE-2026-112561",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112561"
},
{
"name": "CVE-2026-112666",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112666"
},
{
"name": "CVE-2026-65339",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65339"
},
{
"name": "CVE-2026-112698",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112698"
},
{
"name": "CVE-2026-86969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86969"
},
{
"name": "CVE-2026-112416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112416"
},
{
"name": "CVE-2026-113946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113946"
},
{
"name": "CVE-2026-112593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112593"
},
{
"name": "CVE-2026-112677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112677"
},
{
"name": "CVE-2026-86916",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86916"
},
{
"name": "CVE-2026-112660",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112660"
},
{
"name": "CVE-2026-86937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86937"
},
{
"name": "CVE-2026-112646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112646"
},
{
"name": "CVE-2026-112504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112504"
},
{
"name": "CVE-2026-86992",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86992"
},
{
"name": "CVE-2026-86923",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86923"
},
{
"name": "CVE-2026-84494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84494"
},
{
"name": "CVE-2026-112683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112683"
},
{
"name": "CVE-2026-112447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112447"
},
{
"name": "CVE-2026-113896",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113896"
},
{
"name": "CVE-2026-112558",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112558"
},
{
"name": "CVE-2026-112535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112535"
},
{
"name": "CVE-2026-84595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84595"
},
{
"name": "CVE-2026-112410",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112410"
},
{
"name": "CVE-2026-112630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112630"
},
{
"name": "CVE-2026-112449",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112449"
},
{
"name": "CVE-2026-112601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112601"
},
{
"name": "CVE-2026-112639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112639"
},
{
"name": "CVE-2026-112456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112456"
},
{
"name": "CVE-2026-112672",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112672"
},
{
"name": "CVE-2026-86943",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86943"
},
{
"name": "CVE-2026-112611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112611"
},
{
"name": "CVE-2026-65363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65363"
},
{
"name": "CVE-2026-64759",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64759"
},
{
"name": "CVE-2026-112692",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112692"
},
{
"name": "CVE-2026-112627",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112627"
},
{
"name": "CVE-2026-84604",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84604"
},
{
"name": "CVE-2026-112607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112607"
},
{
"name": "CVE-2026-86966",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86966"
},
{
"name": "CVE-2026-84594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84594"
},
{
"name": "CVE-2026-112575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112575"
},
{
"name": "CVE-2026-112498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112498"
},
{
"name": "CVE-2026-112623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112623"
},
{
"name": "CVE-2026-65373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65373"
},
{
"name": "CVE-2026-112500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112500"
},
{
"name": "CVE-2026-112475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112475"
},
{
"name": "CVE-2026-112457",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112457"
},
{
"name": "CVE-2026-113915",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113915"
},
{
"name": "CVE-2026-112687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112687"
},
{
"name": "CVE-2026-113910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113910"
},
{
"name": "CVE-2026-112537",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112537"
},
{
"name": "CVE-2026-112466",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112466"
},
{
"name": "CVE-2026-112497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112497"
},
{
"name": "CVE-2026-112570",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112570"
},
{
"name": "CVE-2026-112609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112609"
},
{
"name": "CVE-2026-112671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112671"
},
{
"name": "CVE-2026-84605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84605"
},
{
"name": "CVE-2026-84610",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84610"
},
{
"name": "CVE-2026-112682",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112682"
},
{
"name": "CVE-2026-112553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112553"
},
{
"name": "CVE-2026-86936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86936"
},
{
"name": "CVE-2026-112615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112615"
},
{
"name": "CVE-2026-86968",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86968"
},
{
"name": "CVE-2026-112501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112501"
},
{
"name": "CVE-2026-113904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113904"
},
{
"name": "CVE-2026-86925",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86925"
},
{
"name": "CVE-2026-112443",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112443"
},
{
"name": "CVE-2026-112634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112634"
},
{
"name": "CVE-2026-112539",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112539"
},
{
"name": "CVE-2026-113942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113942"
},
{
"name": "CVE-2026-112544",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112544"
},
{
"name": "CVE-2026-86939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86939"
},
{
"name": "CVE-2026-112679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112679"
},
{
"name": "CVE-2026-112638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112638"
},
{
"name": "CVE-2026-112632",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112632"
},
{
"name": "CVE-2026-86973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86973"
},
{
"name": "CVE-2026-112526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112526"
},
{
"name": "CVE-2026-112642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112642"
},
{
"name": "CVE-2026-112444",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112444"
},
{
"name": "CVE-2026-113899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113899"
},
{
"name": "CVE-2026-112675",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112675"
},
{
"name": "CVE-2026-112604",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112604"
},
{
"name": "CVE-2026-113906",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113906"
},
{
"name": "CVE-2026-112488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112488"
},
{
"name": "CVE-2026-112531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112531"
},
{
"name": "CVE-2026-112467",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112467"
},
{
"name": "CVE-2026-112624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112624"
},
{
"name": "CVE-2026-112668",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112668"
},
{
"name": "CVE-2026-112676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112676"
},
{
"name": "CVE-2026-112569",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112569"
},
{
"name": "CVE-2026-112432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112432"
},
{
"name": "CVE-2026-112442",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112442"
},
{
"name": "CVE-2026-112610",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112610"
},
{
"name": "CVE-2026-113900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113900"
},
{
"name": "CVE-2026-112628",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112628"
},
{
"name": "CVE-2026-112421",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112421"
},
{
"name": "CVE-2026-112548",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112548"
},
{
"name": "CVE-2026-112423",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112423"
},
{
"name": "CVE-2026-112699",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112699"
},
{
"name": "CVE-2026-113941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113941"
},
{
"name": "CVE-2026-112576",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112576"
},
{
"name": "CVE-2026-112673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112673"
},
{
"name": "CVE-2026-112562",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112562"
},
{
"name": "CVE-2026-112693",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112693"
},
{
"name": "CVE-2026-64750",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64750"
},
{
"name": "CVE-2026-112424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112424"
},
{
"name": "CVE-2026-112706",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112706"
},
{
"name": "CVE-2026-113913",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113913"
},
{
"name": "CVE-2026-112454",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112454"
},
{
"name": "CVE-2022-26704",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26704"
},
{
"name": "CVE-2026-113903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113903"
},
{
"name": "CVE-2026-86946",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86946"
},
{
"name": "CVE-2026-64767",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64767"
},
{
"name": "CVE-2026-112684",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112684"
},
{
"name": "CVE-2026-113934",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113934"
},
{
"name": "CVE-2026-112550",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112550"
},
{
"name": "CVE-2026-113952",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113952"
},
{
"name": "CVE-2026-86942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86942"
},
{
"name": "CVE-2026-112476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112476"
},
{
"name": "CVE-2026-65397",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65397"
},
{
"name": "CVE-2026-112536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112536"
},
{
"name": "CVE-2026-112517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112517"
},
{
"name": "CVE-2026-112519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112519"
},
{
"name": "CVE-2026-65368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65368"
},
{
"name": "CVE-2026-112680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112680"
},
{
"name": "CVE-2026-112665",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112665"
},
{
"name": "CVE-2026-113935",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113935"
},
{
"name": "CVE-2026-86972",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86972"
},
{
"name": "CVE-2026-65327",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65327"
},
{
"name": "CVE-2026-112524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112524"
},
{
"name": "CVE-2026-112493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112493"
},
{
"name": "CVE-2026-112508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112508"
},
{
"name": "CVE-2026-112480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112480"
},
{
"name": "CVE-2026-84590",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84590"
},
{
"name": "CVE-2026-112547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112547"
},
{
"name": "CVE-2026-112438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112438"
},
{
"name": "CVE-2026-112512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112512"
},
{
"name": "CVE-2026-112491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112491"
},
{
"name": "CVE-2026-112516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112516"
},
{
"name": "CVE-2026-112510",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112510"
},
{
"name": "CVE-2026-112534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112534"
},
{
"name": "CVE-2026-112686",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112686"
},
{
"name": "CVE-2026-112690",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112690"
},
{
"name": "CVE-2026-20649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20649"
},
{
"name": "CVE-2026-112464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112464"
},
{
"name": "CVE-2026-113938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113938"
},
{
"name": "CVE-2026-112545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112545"
},
{
"name": "CVE-2026-113940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113940"
},
{
"name": "CVE-2026-112656",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112656"
},
{
"name": "CVE-2026-112555",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112555"
},
{
"name": "CVE-2026-65350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65350"
},
{
"name": "CVE-2026-112633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112633"
},
{
"name": "CVE-2026-20648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-20648"
},
{
"name": "CVE-2026-112506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112506"
},
{
"name": "CVE-2026-112595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112595"
},
{
"name": "CVE-2026-113901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113901"
},
{
"name": "CVE-2026-112477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112477"
},
{
"name": "CVE-2026-112530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112530"
},
{
"name": "CVE-2026-112552",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112552"
},
{
"name": "CVE-2026-112546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112546"
},
{
"name": "CVE-2026-112461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112461"
},
{
"name": "CVE-2026-112459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112459"
},
{
"name": "CVE-2026-112441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112441"
},
{
"name": "CVE-2026-112471",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112471"
},
{
"name": "CVE-2026-84493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84493"
},
{
"name": "CVE-2026-86929",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86929"
},
{
"name": "CVE-2026-112565",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112565"
},
{
"name": "CVE-2026-28991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28991"
},
{
"name": "CVE-2026-112479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112479"
},
{
"name": "CVE-2026-112596",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112596"
},
{
"name": "CVE-2026-86954",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86954"
},
{
"name": "CVE-2026-84542",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84542"
},
{
"name": "CVE-2026-112437",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112437"
},
{
"name": "CVE-2026-113909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113909"
},
{
"name": "CVE-2026-112540",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112540"
},
{
"name": "CVE-2026-112681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112681"
},
{
"name": "CVE-2026-64789",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64789"
},
{
"name": "CVE-2026-86950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86950"
},
{
"name": "CVE-2026-86984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86984"
},
{
"name": "CVE-2026-86974",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86974"
},
{
"name": "CVE-2026-112494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112494"
},
{
"name": "CVE-2026-112637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112637"
},
{
"name": "CVE-2026-112691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112691"
},
{
"name": "CVE-2026-112468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112468"
},
{
"name": "CVE-2026-113936",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113936"
},
{
"name": "CVE-2026-112619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112619"
},
{
"name": "CVE-2026-86971",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86971"
},
{
"name": "CVE-2026-112629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112629"
},
{
"name": "CVE-2026-84614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84614"
},
{
"name": "CVE-2026-112427",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112427"
},
{
"name": "CVE-2026-112521",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112521"
},
{
"name": "CVE-2026-112470",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112470"
},
{
"name": "CVE-2026-112451",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112451"
},
{
"name": "CVE-2026-112617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112617"
},
{
"name": "CVE-2026-112522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112522"
},
{
"name": "CVE-2026-28864",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28864"
},
{
"name": "CVE-2026-112567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112567"
},
{
"name": "CVE-2026-112655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112655"
},
{
"name": "CVE-2026-112541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112541"
},
{
"name": "CVE-2026-112697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112697"
},
{
"name": "CVE-2026-112621",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112621"
},
{
"name": "CVE-2026-112670",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112670"
},
{
"name": "CVE-2026-112688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112688"
},
{
"name": "CVE-2026-112554",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112554"
},
{
"name": "CVE-2026-112505",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112505"
},
{
"name": "CVE-2026-112414",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112414"
},
{
"name": "CVE-2026-112415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112415"
},
{
"name": "CVE-2026-86964",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86964"
},
{
"name": "CVE-2026-112557",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112557"
},
{
"name": "CVE-2026-86970",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-86970"
},
{
"name": "CVE-2026-112518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112518"
},
{
"name": "CVE-2026-112429",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112429"
},
{
"name": "CVE-2026-112469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-112469"
},
{
"name": "CVE-2026-113949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-113949"
}
],
"initial_release_date": "2026-10-27T00:00:00",
"last_revision_date": "2026-10-27T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1387",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2026-86950 est activement exploit\u00e9e.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
"vendor_advisories": [
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149524",
"url": "https://support.apple.com/en-us/149524"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149521",
"url": "https://support.apple.com/en-us/149521"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149225",
"url": "https://support.apple.com/en-us/149225"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149227",
"url": "https://support.apple.com/en-us/149227"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149525",
"url": "https://support.apple.com/en-us/149525"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149527",
"url": "https://support.apple.com/en-us/149527"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149230",
"url": "https://support.apple.com/en-us/149230"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149526",
"url": "https://support.apple.com/en-us/149526"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149523",
"url": "https://support.apple.com/en-us/149523"
},
{
"published_at": "2026-10-26",
"title": "Bulletin de s\u00e9curit\u00e9 Apple 149522",
"url": "https://support.apple.com/en-us/149522"
}
]
}
CVE-2026-86925 (GCVE-0-2026-86925)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to access sensitive user data
Summary
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:37.328Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86925",
"datePublished": "2026-10-26T20:44:37.328Z",
"dateReserved": "2026-09-08T16:43:41.878Z",
"dateUpdated": "2026-10-26T20:44:37.328Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-84627 (GCVE-0-2026-84627)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted image may lead to heap corruption
Summary
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted image may lead to heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:35.462Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149043"
},
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149522"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-84627",
"datePublished": "2026-10-26T20:44:35.462Z",
"dateReserved": "2026-09-01T21:13:23.287Z",
"dateUpdated": "2026-10-26T20:44:35.462Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113945 (GCVE-0-2026-113945)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.
References
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:34.502Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-113945",
"datePublished": "2026-10-26T20:44:34.502Z",
"dateReserved": "2026-10-20T21:06:55.479Z",
"dateUpdated": "2026-10-26T20:44:34.502Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65327 (GCVE-0-2026-65327)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-27 03:56
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- A local attacker may be able to elevate their privileges
Summary
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-65327",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-693",
"description": "CWE-693 Protection Mechanism Failure",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T03:56:20.484Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A local attacker may be able to elevate their privileges",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:33.440Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-65327",
"datePublished": "2026-10-26T20:44:33.440Z",
"dateReserved": "2026-07-22T00:45:02.635Z",
"dateUpdated": "2026-10-27T03:56:20.484Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112529 (GCVE-0-2026-112529)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:32.508Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112529",
"datePublished": "2026-10-26T20:44:32.508Z",
"dateReserved": "2026-10-19T17:05:22.978Z",
"dateUpdated": "2026-10-26T20:44:32.508Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86972 (GCVE-0-2026-86972)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted audio file may lead to memory corruption
Summary
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted audio file may lead to memory corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:31.556Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149524"
},
{
"url": "https://support.apple.com/en-us/149525"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86972",
"datePublished": "2026-10-26T20:44:31.556Z",
"dateReserved": "2026-09-08T16:43:47.662Z",
"dateUpdated": "2026-10-26T20:44:31.556Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112483 (GCVE-0-2026-112483)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to modify protected parts of the file system
Summary
A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to modify protected parts of the file system."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to modify protected parts of the file system",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:29.682Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112483",
"datePublished": "2026-10-26T20:44:29.682Z",
"dateReserved": "2026-10-19T17:05:21.838Z",
"dateUpdated": "2026-10-26T20:44:29.682Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113912 (GCVE-0-2026-113912)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Summary
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:27.691Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149041"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
},
{
"url": "https://support.apple.com/en-us/149524"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-113912",
"datePublished": "2026-10-26T20:44:27.691Z",
"dateReserved": "2026-10-20T21:06:55.476Z",
"dateUpdated": "2026-10-26T20:44:27.691Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112495 (GCVE-0-2026-112495)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination or read kernel memory
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or read kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:26.733Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112495",
"datePublished": "2026-10-26T20:44:26.733Z",
"dateReserved": "2026-10-19T17:05:21.839Z",
"dateUpdated": "2026-10-26T20:44:26.733Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86964 (GCVE-0-2026-86964)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination
Summary
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:25.787Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149034"
},
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149036"
},
{
"url": "https://support.apple.com/en-us/149037"
},
{
"url": "https://support.apple.com/en-us/149038"
},
{
"url": "https://support.apple.com/en-us/149522"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86964",
"datePublished": "2026-10-26T20:44:25.787Z",
"dateReserved": "2026-09-08T16:43:41.882Z",
"dateUpdated": "2026-10-26T20:44:25.787Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113904 (GCVE-0-2026-113904)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing maliciously crafted web content may lead to an unexpected process crash
Summary
A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing maliciously crafted web content may lead to an unexpected process crash",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:23.809Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149524"
},
{
"url": "https://support.apple.com/en-us/149525"
},
{
"url": "https://support.apple.com/en-us/149526"
},
{
"url": "https://support.apple.com/en-us/149527"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-113904",
"datePublished": "2026-10-26T20:44:23.809Z",
"dateReserved": "2026-10-20T21:06:55.476Z",
"dateUpdated": "2026-10-26T20:44:23.809Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112616 (GCVE-0-2026-112616)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to access sensitive user data
Summary
An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authorization issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:22.746Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112616",
"datePublished": "2026-10-26T20:44:22.746Z",
"dateReserved": "2026-10-19T17:05:24.036Z",
"dateUpdated": "2026-10-26T20:44:22.746Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112568 (GCVE-0-2026-112568)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted file may bypass Gatekeeper checks
Summary
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may bypass Gatekeeper checks."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may bypass Gatekeeper checks",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:19.808Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112568",
"datePublished": "2026-10-26T20:44:19.808Z",
"dateReserved": "2026-10-19T17:05:22.981Z",
"dateUpdated": "2026-10-26T20:44:19.808Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112704 (GCVE-0-2026-112704)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- A malicious app may be able to break out of its sandbox
Summary
An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An information leakage was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to break out of its sandbox."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A malicious app may be able to break out of its sandbox",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:16.874Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112704",
"datePublished": "2026-10-26T20:44:16.874Z",
"dateReserved": "2026-10-19T17:05:24.042Z",
"dateUpdated": "2026-10-26T20:44:16.874Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112456 (GCVE-0-2026-112456)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted file may lead to heap corruption
Summary
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Apple | iOS and iPadOS |
Version: 0 < 26.7.2 Version: 0 < 27.2 |
||
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:11.955Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112456",
"datePublished": "2026-10-26T20:44:11.955Z",
"dateReserved": "2026-10-19T17:05:21.835Z",
"dateUpdated": "2026-10-26T20:44:11.955Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112513 (GCVE-0-2026-112513)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to break out of its sandbox
Summary
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox.
References
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Golden Gate 27.2. An app may be able to break out of its sandbox."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to break out of its sandbox",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:10.054Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112513",
"datePublished": "2026-10-26T20:44:10.054Z",
"dateReserved": "2026-10-19T17:05:22.976Z",
"dateUpdated": "2026-10-26T20:44:10.054Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112544 (GCVE-0-2026-112544)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-27 00:02
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Mounting a malicious disk image may cause unexpected system termination
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination.
References
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-112544",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-27T00:02:05.728261Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T00:02:09.390Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a malicious disk image may cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Mounting a malicious disk image may cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:07.294Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112544",
"datePublished": "2026-10-26T20:44:07.294Z",
"dateReserved": "2026-10-19T17:05:22.979Z",
"dateUpdated": "2026-10-27T00:02:09.390Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112682 (GCVE-0-2026-112682)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- A remote attacker may be able to cause unexpected app termination
Summary
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2, watchOS 27.2. A remote attacker may be able to cause unexpected app termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to cause unexpected app termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:05.121Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149525"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112682",
"datePublished": "2026-10-26T20:44:05.121Z",
"dateReserved": "2026-10-19T17:05:24.041Z",
"dateUpdated": "2026-10-26T20:44:05.121Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112552 (GCVE-0-2026-112552)
Vulnerability from cvelistv5
Published
2026-10-26 20:44
Modified
2026-10-26 20:44
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An attacker with control of a network file server may be able to cause unexpected system termination
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with control of a network file server may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An attacker with control of a network file server may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:44:01.047Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112552",
"datePublished": "2026-10-26T20:44:01.047Z",
"dateReserved": "2026-10-19T17:05:22.979Z",
"dateUpdated": "2026-10-26T20:44:01.047Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112505 (GCVE-0-2026-112505)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- A malicious Screen Sharing peer may be able to corrupt process memory
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to corrupt process memory.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious Screen Sharing peer may be able to corrupt process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A malicious Screen Sharing peer may be able to corrupt process memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:57.996Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112505",
"datePublished": "2026-10-26T20:43:57.996Z",
"dateReserved": "2026-10-19T17:05:21.839Z",
"dateUpdated": "2026-10-26T20:43:57.996Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-113949 (GCVE-0-2026-113949)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing maliciously crafted web content may lead to memory corruption
Summary
A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing maliciously crafted web content may lead to memory corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:54.853Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149526"
},
{
"url": "https://support.apple.com/en-us/149527"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-113949",
"datePublished": "2026-10-26T20:43:54.853Z",
"dateReserved": "2026-10-20T21:06:55.479Z",
"dateUpdated": "2026-10-26T20:43:54.853Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86929 (GCVE-0-2026-86929)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-27 03:56
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted file may lead to arbitrary code execution
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-86929",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-26T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T03:56:16.360Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to arbitrary code execution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:53.806Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149035"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86929",
"datePublished": "2026-10-26T20:43:53.806Z",
"dateReserved": "2026-09-08T16:43:41.879Z",
"dateUpdated": "2026-10-27T03:56:16.360Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112437 (GCVE-0-2026-112437)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to gain root privileges
Summary
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to gain root privileges",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:51.710Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112437",
"datePublished": "2026-10-26T20:43:51.710Z",
"dateReserved": "2026-10-19T17:05:21.834Z",
"dateUpdated": "2026-10-26T20:43:51.710Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112525 (GCVE-0-2026-112525)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination or read kernel memory
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or read kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or read kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:47.516Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112525",
"datePublished": "2026-10-26T20:43:47.516Z",
"dateReserved": "2026-10-19T17:05:22.977Z",
"dateUpdated": "2026-10-26T20:43:47.516Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86991 (GCVE-0-2026-86991)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- Processing a maliciously crafted file may lead to unexpected process termination
Summary
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected process termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:44.001Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86991",
"datePublished": "2026-10-26T20:43:44.001Z",
"dateReserved": "2026-09-08T16:43:47.664Z",
"dateUpdated": "2026-10-26T20:43:44.001Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-86968 (GCVE-0-2026-86968)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- A malicious app may be able to access restricted system interfaces or launder launch attribution
Summary
An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A malicious app may be able to access restricted system interfaces or launder launch attribution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:39.915Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-86968",
"datePublished": "2026-10-26T20:43:39.915Z",
"dateReserved": "2026-09-08T16:43:47.662Z",
"dateUpdated": "2026-10-26T20:43:39.915Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112533 (GCVE-0-2026-112533)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to access sensitive user data
Summary
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:38.966Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112533",
"datePublished": "2026-10-26T20:43:38.966Z",
"dateReserved": "2026-10-19T17:05:22.978Z",
"dateUpdated": "2026-10-26T20:43:38.966Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112476 (GCVE-0-2026-112476)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-26 20:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination
Summary
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination.
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:38.022Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149227"
},
{
"url": "https://support.apple.com/en-us/149230"
},
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
},
{
"url": "https://support.apple.com/en-us/149524"
},
{
"url": "https://support.apple.com/en-us/149525"
},
{
"url": "https://support.apple.com/en-us/149526"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112476",
"datePublished": "2026-10-26T20:43:38.022Z",
"dateReserved": "2026-10-19T17:05:21.837Z",
"dateUpdated": "2026-10-26T20:43:38.022Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-112708 (GCVE-0-2026-112708)
Vulnerability from cvelistv5
Published
2026-10-26 20:43
Modified
2026-10-27 00:08
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An app may be able to cause unexpected system termination or corrupt process memory
Summary
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-112708",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-27T00:07:14.737799Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-27T00:08:21.376Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.8.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.7.2",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "27.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or corrupt process memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-26T20:43:35.088Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/149521"
},
{
"url": "https://support.apple.com/en-us/149522"
},
{
"url": "https://support.apple.com/en-us/149523"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-112708",
"datePublished": "2026-10-26T20:43:35.088Z",
"dateReserved": "2026-10-19T17:05:24.042Z",
"dateUpdated": "2026-10-27T00:08:21.376Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}