CyberSecBulletin

Apple vulnerabilities

We track 1,317 vulnerabilities in Apple products across 48 products. 1,301 are rated high or critical, and 104 have been exploited in real attacks. The most recent was published on November 9, 2026.

1,317vulnerabilities
218critical
1,083high
104exploited
8.1average CVSS score

Latest Apple vulnerabilities

  • 8.8 High severity

    HomeView Software: Use After Free

    CVE-2026-113970Apple

    A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.

  • 7.5 High severity

    HomeView Software: Protection Mechanism Failure

    CVE-2026-113969Apple

    A logic issue was addressed with improved state management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS

  • 7.5 High severity

    HomeView Software: Incorrect Authorization

    CVE-2026-113961Apple

    An authorization issue was addressed with improved validation. This issue is fixed in HomeView Software Version 27.2, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, visionOS 27.2.

  • 7.5 High severity

    iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-86992Apple

    The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a malicio

  • 7.5 High severity

    iOS and iPadOS: Buffer Copy without Checking Size of Input

    CVE-2026-86991Apple

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file

  • 7.5 High severity

    Safari: Use After Free

    CVE-2026-86986Apple

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an u

  • 7.5 High severity

    Safari: Access of Resource Using Incompatible Type

    CVE-2026-86974Apple

    A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corrupti

  • 7.8 High severity

    iOS and iPadOS: Buffer Copy without Checking Size of Input

    CVE-2026-86972Apple

    A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted a

  • 7.5 High severity

    iOS and iPadOS: Out-of-bounds Write

    CVE-2026-86969Apple

    An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system

  • 7.5 High severity

    iOS and iPadOS: Improper Access Control

    CVE-2026-86968Apple

    An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution.

  • 7.5 High severity

    iOS and iPadOS: NULL Pointer Dereference

    CVE-2026-86964Apple

    A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

  • 7.8 High severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-86958Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code.

  • 7.7 High severity

    macOS: Use After Free

    CVE-2026-86946Apple

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

  • 7.1 High severity

    macOS: Incorrect Permission Assignment for Critical Resource

    CVE-2026-86945Apple

    This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to create files in protected directories.

  • 7.5 High severity

    macOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-86943Apple

    The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause a denial-of-service.

  • 7.8 High severity

    macOS: Protection Mechanism Failure

    CVE-2026-86936Apple

    A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges.

  • 8.8 High severity

    macOS: Out-of-bounds Read

    CVE-2026-86929Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution.

  • 7.8 High severity

    iOS and iPadOS: Use After Free

    CVE-2026-86916Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2. An app may be able to execute arbitrary code with kernel

  • 7.8 High severity

    macOS: Improper Privilege Management

    CVE-2026-86896Apple

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.

  • 9.0 Critical severity

    macOS: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-84633Apple

    A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.

  • 7.8 High severity

    iOS and iPadOS: Out-of-bounds Write

    CVE-2026-84627Apple

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2026-84604Apple

    A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory.

  • 7.8 High severity

    iOS and iPadOS: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2026-84599Apple

    The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpect

  • 8.8 High severity

    macOS: Use After Free

    CVE-2026-84545Apple

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privi

  • 9.8 Critical severity

    macOS: Out-of-bounds Write

    CVE-2026-84539Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination.

  • 7.8 High severity

    iOS and iPadOS: Use After Free

    CVE-2026-84495Apple

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An ap

  • 7.1 High severity

    iOS and iPadOS: Out-of-bounds Write

    CVE-2026-84494Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or write kernel memory.

  • 7.8 High severity

    iOS and iPadOS: Out-of-bounds Write

    CVE-2026-65385Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app terminati

  • 7.5 High severity

    macOS: Out-of-bounds Read

    CVE-2026-65384Apple

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may cause an unexpected process termination.

  • 7.8 High severity

    macOS: Improper Privilege Management

    CVE-2026-65373Apple

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges.

  • 8.4 High severity

    iOS and iPadOS: Improper Access Control

    CVE-2026-65363Apple

    The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox.

  • 7.1 High severity

    iOS and iPadOS: Use After Free

    CVE-2026-65350Apple

    A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An ap

  • 8.4 High severity

    macOS: Protection Mechanism Failure

    CVE-2026-65327Apple

    A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges.

  • 8.8 High severity

    iOS and iPadOS: Integer Overflow or Wraparound

    CVE-2026-64759Apple

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrar

  • 8.8 High severity

    Safari: Access of Resource Using Incompatible Type

    CVE-2026-113949Apple

    A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memor

  • 8.8 High severity

    macOS: Improper Privilege Management

    CVE-2026-113947Apple

    This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution.

  • 7.8 High severity

    macOS: Out-of-bounds Write

    CVE-2026-113946Apple

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

  • 7.1 High severity

    macOS: Out-of-bounds Read

    CVE-2026-113944Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory.

  • 7.1 High severity

    macOS: Out-of-bounds Read

    CVE-2026-113942Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory.

  • 7.1 High severity

    macOS: Out-of-bounds Read

    CVE-2026-113941Apple

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory.