Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
6012 vulnerabilities found for tvOS by Apple
CVE-2026-64775 (GCVE-0-2026-64775)
Vulnerability from nvd – Published: 2026-07-27 20:11 – Updated: 2026-07-27 20:11
VLAI
EPSS
VEX
Summary
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
Severity
No CVSS data available.
CWE
- An app may be able to cause unexpected system termination
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:11:58.713Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64775",
"datePublished": "2026-07-27T20:11:58.713Z",
"dateReserved": "2026-07-20T18:10:53.025Z",
"dateUpdated": "2026-07-27T20:11:58.713Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64774 (GCVE-0-2026-64774)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
Severity
No CVSS data available.
CWE
- A remote attacker may be able to cause unexpected application termination or heap corruption
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to cause unexpected application termination or heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:40.417Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64774",
"datePublished": "2026-07-27T20:12:40.417Z",
"dateReserved": "2026-07-20T18:10:53.025Z",
"dateUpdated": "2026-07-27T20:12:40.417Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64772 (GCVE-0-2026-64772)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
Severity
No CVSS data available.
CWE
- A remote attacker may be able to cause unexpected application termination or heap corruption
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to cause unexpected application termination or heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:20.490Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64772",
"datePublished": "2026-07-27T20:13:20.490Z",
"dateReserved": "2026-07-20T18:10:53.025Z",
"dateUpdated": "2026-07-27T20:13:20.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64771 (GCVE-0-2026-64771)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
Severity
No CVSS data available.
CWE
- A remote attacker may be able to cause unexpected application termination or heap corruption
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to cause unexpected application termination or heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:54.442Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64771",
"datePublished": "2026-07-27T20:13:54.442Z",
"dateReserved": "2026-07-20T18:10:53.025Z",
"dateUpdated": "2026-07-27T20:13:54.442Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64770 (GCVE-0-2026-64770)
Vulnerability from nvd – Published: 2026-07-27 20:14 – Updated: 2026-07-27 20:14
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
Severity
No CVSS data available.
CWE
- A remote attacker may be able to cause unexpected application termination or heap corruption
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to cause unexpected application termination or heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:14:00.344Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64770",
"datePublished": "2026-07-27T20:14:00.344Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:14:00.344Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64769 (GCVE-0-2026-64769)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
Severity
No CVSS data available.
CWE
- A remote attacker may be able to cause unexpected application termination or heap corruption
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to cause unexpected application termination or heap corruption",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:46.870Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64769",
"datePublished": "2026-07-27T20:12:46.870Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:12:46.870Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64768 (GCVE-0-2026-64768)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may cause an unexpected app termination.
Severity
No CVSS data available.
CWE
- A remote attacker may cause an unexpected app termination
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may cause an unexpected app termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may cause an unexpected app termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:32.837Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64768",
"datePublished": "2026-07-27T20:13:32.837Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:13:32.837Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64766 (GCVE-0-2026-64766)
Vulnerability from nvd – Published: 2026-07-27 20:14 – Updated: 2026-07-27 20:14
VLAI
EPSS
VEX
Summary
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Severity
No CVSS data available.
CWE
- Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:14:02.814Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64766",
"datePublished": "2026-07-27T20:14:02.814Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:14:02.814Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64765 (GCVE-0-2026-64765)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Severity
No CVSS data available.
CWE
- Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:01.023Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64765",
"datePublished": "2026-07-27T20:13:01.023Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:13:01.023Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64764 (GCVE-0-2026-64764)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Severity
No CVSS data available.
CWE
- Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:17.354Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64764",
"datePublished": "2026-07-27T20:13:17.354Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:13:17.354Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64763 (GCVE-0-2026-64763)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Severity
No CVSS data available.
CWE
- Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:01.967Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64763",
"datePublished": "2026-07-27T20:12:01.967Z",
"dateReserved": "2026-07-20T18:10:43.924Z",
"dateUpdated": "2026-07-27T20:12:01.967Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64758 (GCVE-0-2026-64758)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination.
Severity
No CVSS data available.
CWE
- Processing a maliciously crafted file may lead to unexpected app termination
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to unexpected app termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:32.193Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64758",
"datePublished": "2026-07-27T20:12:32.193Z",
"dateReserved": "2026-07-20T18:10:30.633Z",
"dateUpdated": "2026-07-27T20:12:32.193Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64754 (GCVE-0-2026-64754)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service.
Severity
No CVSS data available.
CWE
- Processing a maliciously crafted file may lead to a denial-of-service
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to a denial-of-service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Processing a maliciously crafted file may lead to a denial-of-service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:20.455Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64754",
"datePublished": "2026-07-27T20:12:20.455Z",
"dateReserved": "2026-07-20T18:10:30.632Z",
"dateUpdated": "2026-07-27T20:12:20.455Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64751 (GCVE-0-2026-64751)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.
Severity
No CVSS data available.
CWE
- An app may be able to cause unexpected system termination or write kernel memory
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination or write kernel memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:37.035Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64751",
"datePublished": "2026-07-27T20:13:37.035Z",
"dateReserved": "2026-07-20T18:10:30.632Z",
"dateUpdated": "2026-07-27T20:13:37.035Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64747 (GCVE-0-2026-64747)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges.
Severity
No CVSS data available.
CWE
- An app may be able to execute arbitrary code with kernel privileges
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to execute arbitrary code with kernel privileges",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:38.693Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64747",
"datePublished": "2026-07-27T20:13:38.693Z",
"dateReserved": "2026-07-20T18:10:18.985Z",
"dateUpdated": "2026-07-27T20:13:38.693Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64743 (GCVE-0-2026-64743)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Severity
No CVSS data available.
CWE
- An app may be able to access sensitive user data
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:14.717Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64743",
"datePublished": "2026-07-27T20:12:14.717Z",
"dateReserved": "2026-07-20T18:10:18.985Z",
"dateUpdated": "2026-07-27T20:12:14.717Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64742 (GCVE-0-2026-64742)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Severity
No CVSS data available.
CWE
- An app may be able to access sensitive user data
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:26.427Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64742",
"datePublished": "2026-07-27T20:12:26.427Z",
"dateReserved": "2026-07-20T18:10:18.985Z",
"dateUpdated": "2026-07-27T20:12:26.427Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64741 (GCVE-0-2026-64741)
Vulnerability from nvd – Published: 2026-07-27 20:14 – Updated: 2026-07-27 20:14
VLAI
EPSS
VEX
Summary
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier.
Severity
No CVSS data available.
CWE
- An app may be able to read a persistent device identifier
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to read a persistent device identifier."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to read a persistent device identifier",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:14:29.891Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64741",
"datePublished": "2026-07-27T20:14:29.891Z",
"dateReserved": "2026-07-20T18:10:18.985Z",
"dateUpdated": "2026-07-27T20:14:29.891Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64740 (GCVE-0-2026-64740)
Vulnerability from nvd – Published: 2026-07-27 20:14 – Updated: 2026-07-27 20:14
VLAI
EPSS
VEX
Summary
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.
Severity
No CVSS data available.
CWE
- A malicious app may be able to break out of its sandbox
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A malicious app may be able to break out of its sandbox",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:14:53.836Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64740",
"datePublished": "2026-07-27T20:14:53.836Z",
"dateReserved": "2026-07-20T18:09:54.848Z",
"dateUpdated": "2026-07-27T20:14:53.836Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64739 (GCVE-0-2026-64739)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker may be able to cause unexpected app termination.
Severity
No CVSS data available.
CWE
- An attacker may be able to cause unexpected app termination
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker may be able to cause unexpected app termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An attacker may be able to cause unexpected app termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:28.898Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64739",
"datePublished": "2026-07-27T20:12:28.898Z",
"dateReserved": "2026-07-20T18:09:54.848Z",
"dateUpdated": "2026-07-27T20:12:28.898Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64735 (GCVE-0-2026-64735)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters.
Severity
No CVSS data available.
CWE
- A remote attacker may be able to bypass network filters
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "A remote attacker may be able to bypass network filters",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:36.312Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64735",
"datePublished": "2026-07-27T20:12:36.312Z",
"dateReserved": "2026-07-20T18:09:54.848Z",
"dateUpdated": "2026-07-27T20:12:36.312Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64733 (GCVE-0-2026-64733)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.
Severity
No CVSS data available.
CWE
- An app may be able to fingerprint the user
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to fingerprint the user",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:15.015Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64733",
"datePublished": "2026-07-27T20:13:15.015Z",
"dateReserved": "2026-07-20T18:09:54.848Z",
"dateUpdated": "2026-07-27T20:13:15.015Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64730 (GCVE-0-2026-64730)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.
Severity
No CVSS data available.
CWE
- Visiting a website that frames malicious content may lead to UI spoofing
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Visiting a website that frames malicious content may lead to UI spoofing",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:50.343Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128073"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64730",
"datePublished": "2026-07-27T20:13:50.343Z",
"dateReserved": "2026-07-20T18:09:47.193Z",
"dateUpdated": "2026-07-27T20:13:50.343Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64729 (GCVE-0-2026-64729)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
Severity
No CVSS data available.
CWE
- An app may be able to cause unexpected system termination
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:36.159Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64729",
"datePublished": "2026-07-27T20:13:36.159Z",
"dateReserved": "2026-07-20T18:09:47.193Z",
"dateUpdated": "2026-07-27T20:13:36.159Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64728 (GCVE-0-2026-64728)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy.
Severity
No CVSS data available.
CWE
- Maliciously crafted web content may violate iframe sandboxing policy
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "Safari",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Maliciously crafted web content may violate iframe sandboxing policy."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Maliciously crafted web content may violate iframe sandboxing policy",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:44.436Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128073"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64728",
"datePublished": "2026-07-27T20:12:44.436Z",
"dateReserved": "2026-07-20T18:09:47.192Z",
"dateUpdated": "2026-07-27T20:12:44.436Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64727 (GCVE-0-2026-64727)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination.
Severity
No CVSS data available.
CWE
- An app may be able to cause unexpected system termination
Assigner
References
2 references
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.6, tvOS 26.6. An app may be able to cause unexpected system termination."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause unexpected system termination",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:58.610Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128069"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64727",
"datePublished": "2026-07-27T20:13:58.610Z",
"dateReserved": "2026-07-20T18:09:47.192Z",
"dateUpdated": "2026-07-27T20:13:58.610Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64726 (GCVE-0-2026-64726)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.
Severity
No CVSS data available.
CWE
- An attacker in physical proximity may be able to corrupt process memory
Assigner
References
Impacted products
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An attacker in physical proximity may be able to corrupt process memory",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:56.070Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64726",
"datePublished": "2026-07-27T20:13:56.070Z",
"dateReserved": "2026-07-20T18:09:47.192Z",
"dateUpdated": "2026-07-27T20:13:56.070Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64725 (GCVE-0-2026-64725)
Vulnerability from nvd – Published: 2026-07-27 20:13 – Updated: 2026-07-27 20:13
VLAI
EPSS
VEX
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.
Severity
No CVSS data available.
CWE
- An app may be able to cause a denial-of-service
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to cause a denial-of-service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:13:23.660Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64725",
"datePublished": "2026-07-27T20:13:23.660Z",
"dateReserved": "2026-07-20T18:09:47.192Z",
"dateUpdated": "2026-07-27T20:13:23.660Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64724 (GCVE-0-2026-64724)
Vulnerability from nvd – Published: 2026-07-27 20:12 – Updated: 2026-07-27 20:12
VLAI
EPSS
VEX
Summary
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker on the local network may be able to cause a denial-of-service.
Severity
No CVSS data available.
CWE
- An attacker on the local network may be able to cause a denial-of-service
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker on the local network may be able to cause a denial-of-service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An attacker on the local network may be able to cause a denial-of-service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:12:58.667Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64724",
"datePublished": "2026-07-27T20:12:58.667Z",
"dateReserved": "2026-07-20T18:09:47.192Z",
"dateUpdated": "2026-07-27T20:12:58.667Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-64721 (GCVE-0-2026-64721)
Vulnerability from nvd – Published: 2026-07-27 20:14 – Updated: 2026-07-27 20:14
VLAI
EPSS
VEX
Summary
This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data.
Severity
No CVSS data available.
CWE
- An app may be able to access sensitive user data
Assigner
References
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | iOS and iPadOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | macOS |
Affected:
0 , < 14.8.8
(custom)
Affected: 0 , < 15.7.8 (custom) Affected: 0 , < 26.6 (custom) |
|
| Apple | tvOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | visionOS |
Affected:
0 , < 26.6
(custom)
|
|
| Apple | watchOS |
Affected:
0 , < 26.6
(custom)
|
{
"containers": {
"cna": {
"affected": [
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.8.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "15.7.8",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"product": "watchOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "26.6",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An app may be able to access sensitive user data",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-27T20:14:56.204Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/128066"
},
{
"url": "https://support.apple.com/en-us/128067"
},
{
"url": "https://support.apple.com/en-us/128068"
},
{
"url": "https://support.apple.com/en-us/128069"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/en-us/128071"
},
{
"url": "https://support.apple.com/en-us/128072"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2026-64721",
"datePublished": "2026-07-27T20:14:56.204Z",
"dateReserved": "2026-07-20T18:09:47.192Z",
"dateUpdated": "2026-07-27T20:14:56.204Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}