{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Apple heeft meerdere kwetsbaarheden verholpen in diverse versies van iOS en iPadOS.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "Er zijn diverse geheugenbeheerfouten zoals use-after-free, buffer overflows, out-of-bounds reads en writes, integer overflows, race conditions en insufficient input validation opgelost. Deze fouten kunnen leiden tot onverwachte systeem- of applicatie-terminaties, geheugenbeschadiging, privilege-escalatie, sandbox-ontsnapping, ongeautoriseerde toegang tot gevoelige gebruikersdata, en in sommige gevallen het uitvoeren van willekeurige code. Ook zijn problemen met state management, permissies, sandboxing en UI spoofing in Safari en andere Apple componenten aangepakt. De kwetsbaarheden zijn aanwezig in kerncomponenten van de besturingssystemen en be\u00efnvloeden een breed scala aan Apple-platforms. Exploitatie kan plaatsvinden via speciaal vervaardigde bestanden, netwerkverkeer, webcontent of applicaties. Er zijn geen specifieke proof-of-concept details in de input vermeld.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Apple heeft updates uitgebracht voor iOS en iPadOS om deze kwetsbaarheden te verhelpen. Gebruikers en beheerders wordt geadviseerd deze updates te installeren om de beveiliging van hun systemen te waarborgen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
        "title": "CWE-22"
      },
      {
        "category": "general",
        "text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
        "title": "CWE-119"
      },
      {
        "category": "general",
        "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
        "title": "CWE-120"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Read",
        "title": "CWE-125"
      },
      {
        "category": "general",
        "text": "Exposure of Sensitive Information to an Unauthorized Actor",
        "title": "CWE-200"
      },
      {
        "category": "general",
        "text": "Insertion of Sensitive Information Into Sent Data",
        "title": "CWE-201"
      },
      {
        "category": "general",
        "text": "Authentication Bypass by Primary Weakness",
        "title": "CWE-305"
      },
      {
        "category": "general",
        "text": "Use After Free",
        "title": "CWE-416"
      },
      {
        "category": "general",
        "text": "Insufficiently Protected Credentials",
        "title": "CWE-522"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference",
        "url": "https://support.apple.com/en-us/128066"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
    "tracking": {
      "current_release_date": "2026-07-28T08:56:15.041627Z",
      "generator": {
        "date": "2025-08-04T16:30:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.3"
        }
      },
      "id": "NCSC-2026-0266",
      "initial_release_date": "2026-07-28T08:56:15.041627Z",
      "revision_history": [
        {
          "date": "2026-07-28T08:56:15.041627Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-1"
                }
              }
            ],
            "category": "product_name",
            "name": "iOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/*",
                "product": {
                  "name": "vers:unknown/*",
                  "product_id": "CSAFPID-2"
                }
              }
            ],
            "category": "product_name",
            "name": "iPadOS"
          }
        ],
        "category": "vendor",
        "name": "Apple"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3783",
      "cwe": {
        "id": "CWE-522",
        "name": "Insufficiently Protected Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Insufficiently Protected Credentials",
          "title": "CWE-522"
        },
        {
          "category": "other",
          "text": "Insertion of Sensitive Information Into Sent Data",
          "title": "CWE-201"
        },
        {
          "category": "description",
          "text": "A curl vulnerability in versions 7.33.0 to before 8.19.0 allows OAuth2 bearer tokens to be leaked to redirected hosts with .netrc entries, affecting multiple NetApp products and Apple software, risking sensitive information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-3783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-3783.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-3783"
    },
    {
      "cve": "CVE-2026-3784",
      "cwe": {
        "id": "CWE-305",
        "name": "Authentication Bypass by Primary Weakness"
      },
      "notes": [
        {
          "category": "other",
          "text": "Authentication Bypass by Primary Weakness",
          "title": "CWE-305"
        },
        {
          "category": "description",
          "text": "Curl versions prior to 8.19.0 contain vulnerabilities including improper reuse of HTTP proxy connections with different credentials during CONNECT requests, leading to potential unauthorized access and sensitive information disclosure.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-3784 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-3784.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-3784"
    },
    {
      "cve": "CVE-2026-4424",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Read",
          "title": "CWE-125"
        },
        {
          "category": "description",
          "text": "Libarchive contains multiple vulnerabilities including a heap out-of-bounds read in RAR archive processing that can disclose sensitive memory, memory allocation errors in ISO files causing denial of service, and a heap buffer overflow in zisofs potentially enabling arbitrary code execution.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-4424 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-4424.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-4424"
    },
    {
      "cve": "CVE-2026-28928",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in iOS 26.6 and related OS versions was addressed through improved memory management to prevent apps from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28928 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28928.json"
        }
      ],
      "title": "CVE-2026-28928"
    },
    {
      "cve": "CVE-2026-28931",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability causing kernel memory corruption via malicious NFS server connections was fixed with improved bounds checking in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28931 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28931.json"
        }
      ],
      "title": "CVE-2026-28931"
    },
    {
      "cve": "CVE-2026-28973",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability allowing sandbox escape was addressed via improved input validation in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-28973 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28973.json"
        }
      ],
      "title": "CVE-2026-28973"
    },
    {
      "cve": "CVE-2026-43673",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability caused by processing a maliciously crafted audio file was resolved through improved memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43673 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43673.json"
        }
      ],
      "title": "CVE-2026-43673"
    },
    {
      "cve": "CVE-2026-43711",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability causing unexpected application termination when processing maliciously crafted video files was resolved through improved memory handling across multiple Apple operating systems.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43711 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43711.json"
        }
      ],
      "title": "CVE-2026-43711"
    },
    {
      "cve": "CVE-2026-43714",
      "notes": [
        {
          "category": "description",
          "text": "The vulnerability was addressed by enhancing input sanitization across multiple OS versions, including iOS 26.6 and macOS updates, to prevent malicious applications from accessing protected user data.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43714 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43714.json"
        }
      ],
      "title": "CVE-2026-43714"
    },
    {
      "cve": "CVE-2026-43723",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
          "title": "CWE-22"
        },
        {
          "category": "description",
          "text": "A path handling vulnerability allowing privilege escalation to root was addressed through improved validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and macOS Sequoia 15.7.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43723 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43723.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-43723"
    },
    {
      "cve": "CVE-2026-43729",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability causing potential process memory corruption when processing malicious images has been resolved in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43729 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43729.json"
        }
      ],
      "title": "CVE-2026-43729"
    },
    {
      "cve": "CVE-2026-43730",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue in iOS 26.6 and related versions was fixed by adding restrictions to prevent apps from fingerprinting users, addressing a potential privacy vulnerability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43730 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43730.json"
        }
      ],
      "title": "CVE-2026-43730"
    },
    {
      "cve": "CVE-2026-43733",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability caused by processing a maliciously crafted image was addressed through improved memory handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43733 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43733.json"
        }
      ],
      "title": "CVE-2026-43733"
    },
    {
      "cve": "CVE-2026-43739",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected system termination was resolved by improving memory handling and implementing enhanced bounds checking across multiple OS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43739 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43739.json"
        }
      ],
      "title": "CVE-2026-43739"
    },
    {
      "cve": "CVE-2026-43740",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use After Free",
          "title": "CWE-416"
        },
        {
          "category": "description",
          "text": "A use-after-free memory handling flaw in WebKitGTK and multiple Apple software versions was fixed to prevent process memory disclosure when processing maliciously crafted web content.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43740 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43740.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-43740"
    },
    {
      "cve": "CVE-2026-43744",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent process termination caused by maliciously crafted audio streams.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43744 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43744.json"
        }
      ],
      "title": "CVE-2026-43744"
    },
    {
      "cve": "CVE-2026-43753",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in iOS 26.6, iPadOS 26.6, and multiple macOS versions was addressed by Apple through enhanced bounds checking to prevent unauthorized access to sensitive user data on locked devices with physical access.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43753 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43753.json"
        }
      ],
      "title": "CVE-2026-43753"
    },
    {
      "cve": "CVE-2026-43769",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability causing unexpected system termination was addressed via improved input validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and macOS Sequoia 15.7.8 and Sonoma 14.8.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43769 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43769.json"
        }
      ],
      "title": "CVE-2026-43769"
    },
    {
      "cve": "CVE-2026-43776",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
          "title": "CWE-120"
        },
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6 was fixed by improving bounds checking to prevent unexpected app termination or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43776 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43776.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1",
            "CSAFPID-2"
          ]
        }
      ],
      "title": "CVE-2026-43776"
    },
    {
      "cve": "CVE-2026-43778",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability affecting multiple Apple OS versions was fixed by improving memory management to prevent unexpected system termination or kernel memory corruption caused by malicious applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43778 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43778.json"
        }
      ],
      "title": "CVE-2026-43778"
    },
    {
      "cve": "CVE-2026-43780",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination when processing maliciously crafted textures.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43780 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43780.json"
        }
      ],
      "title": "CVE-2026-43780"
    },
    {
      "cve": "CVE-2026-43796",
      "notes": [
        {
          "category": "description",
          "text": "An app vulnerability allowing potential access to sensitive user data was addressed with enhanced data protection across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and later.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43796 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43796.json"
        }
      ],
      "title": "CVE-2026-43796"
    },
    {
      "cve": "CVE-2026-43797",
      "notes": [
        {
          "category": "description",
          "text": "Apple fixed an issue in iOS 26.6, iPadOS 26.6, and macOS Tahoe 26.6 that allowed apps to improperly access user contact information by implementing enhanced verification checks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43797 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43797.json"
        }
      ],
      "title": "CVE-2026-43797"
    },
    {
      "cve": "CVE-2026-43799",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability causing unexpected system termination was addressed through improved memory management in iOS 26.6, iPadOS 26.6, multiple macOS versions, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43799 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43799.json"
        }
      ],
      "title": "CVE-2026-43799"
    },
    {
      "cve": "CVE-2026-43800",
      "notes": [
        {
          "category": "description",
          "text": "An information disclosure vulnerability in iOS, iPadOS, macOS Tahoe, tvOS, and watchOS was addressed by removing the vulnerable code in version 26.6 of each operating system.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43800 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43800.json"
        }
      ],
      "title": "CVE-2026-43800"
    },
    {
      "cve": "CVE-2026-43801",
      "notes": [
        {
          "category": "description",
          "text": "Improved security checks were implemented in iOS 26.6 and macOS Sequoia 15.7.8 to prevent apps from unauthorized access to sensitive user data, addressing a significant privacy vulnerability.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43801 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43801.json"
        }
      ],
      "title": "CVE-2026-43801"
    },
    {
      "cve": "CVE-2026-43803",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent remote attackers from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43803 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43803.json"
        }
      ],
      "title": "CVE-2026-43803"
    },
    {
      "cve": "CVE-2026-43804",
      "notes": [
        {
          "category": "description",
          "text": "An app denial-of-service issue triggered by visiting a website was resolved through improved state management in Safari 26.6, iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, and visionOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43804 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43804.json"
        }
      ],
      "title": "CVE-2026-43804"
    },
    {
      "cve": "CVE-2026-43805",
      "notes": [
        {
          "category": "description",
          "text": "A race condition causing potential system termination or kernel memory corruption was resolved by enhanced state handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43805 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43805.json"
        }
      ],
      "title": "CVE-2026-43805"
    },
    {
      "cve": "CVE-2026-43810",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability in multiple Apple operating systems including iOS 26.6, macOS Sequoia 15.7.8, and others has been fixed, which could have allowed remote users to cause system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43810 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43810.json"
        }
      ],
      "title": "CVE-2026-43810"
    },
    {
      "cve": "CVE-2026-43811",
      "notes": [
        {
          "category": "description",
          "text": "A race condition vulnerability in iOS 26.6 and iPadOS 26.6 allowed an app to modify protected parts of the file system, which has been addressed in these updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43811 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43811.json"
        }
      ],
      "title": "CVE-2026-43811"
    },
    {
      "cve": "CVE-2026-43812",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing unexpected system termination was resolved via enhanced memory management in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43812 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43812.json"
        }
      ],
      "title": "CVE-2026-43812"
    },
    {
      "cve": "CVE-2026-43813",
      "notes": [
        {
          "category": "description",
          "text": "A validation issue in iOS 26.6 and related versions was fixed by enhancing input sanitization to prevent malicious applications from bypassing code signing enforcement.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43813 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43813.json"
        }
      ],
      "title": "CVE-2026-43813"
    },
    {
      "cve": "CVE-2026-43814",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing unexpected system termination was resolved via enhanced memory management in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43814 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43814.json"
        }
      ],
      "title": "CVE-2026-43814"
    },
    {
      "cve": "CVE-2026-43816",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected system termination was resolved by improving memory handling and implementing enhanced bounds checking across multiple OS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43816 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43816.json"
        }
      ],
      "title": "CVE-2026-43816"
    },
    {
      "cve": "CVE-2026-43817",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability causing unexpected system termination was addressed through improved bounds checking in iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS version 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43817 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43817.json"
        }
      ],
      "title": "CVE-2026-43817"
    },
    {
      "cve": "CVE-2026-43818",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability enabling arbitrary code execution via crafted images was addressed through enhanced input validation in iOS 26.6, iPadOS 26.6, and macOS versions including Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43818 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43818.json"
        }
      ],
      "title": "CVE-2026-43818"
    },
    {
      "cve": "CVE-2026-43821",
      "notes": [
        {
          "category": "description",
          "text": "An access control vulnerability allowing applications to read files outside their sandbox was resolved through enhanced access restrictions in Safari 26.6, iOS 26.6, and macOS Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43821 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43821.json"
        }
      ],
      "title": "CVE-2026-43821"
    },
    {
      "cve": "CVE-2026-43822",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing applications from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-43822 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43822.json"
        }
      ],
      "title": "CVE-2026-43822"
    },
    {
      "cve": "CVE-2026-64692",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability affecting multiple Apple OS versions was fixed by improving bounds checking to prevent potential denial-of-service attacks caused by malicious applications.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64692 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64692.json"
        }
      ],
      "title": "CVE-2026-64692"
    },
    {
      "cve": "CVE-2026-64693",
      "notes": [
        {
          "category": "description",
          "text": "A type confusion vulnerability in multiple Apple operating systems was fixed by implementing improved checks to prevent denial-of-service caused by processing maliciously crafted images.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64693 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64693.json"
        }
      ],
      "title": "CVE-2026-64693"
    },
    {
      "cve": "CVE-2026-64700",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability causing unexpected system termination was addressed through improved memory management in iOS 26.6, iPadOS 26.6, multiple macOS versions, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64700 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64700.json"
        }
      ],
      "title": "CVE-2026-64700"
    },
    {
      "cve": "CVE-2026-64707",
      "notes": [
        {
          "category": "description",
          "text": "A permissions vulnerability allowing unauthorized deletion of files without proper permission was fixed through improved validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64707 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64707.json"
        }
      ],
      "title": "CVE-2026-64707"
    },
    {
      "cve": "CVE-2026-64709",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling issue that could allow an app to disclose kernel memory was resolved through improvements in multiple OS versions including iOS 16.6 and macOS Sequoia 15.7.8.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64709 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64709.json"
        }
      ],
      "title": "CVE-2026-64709"
    },
    {
      "cve": "CVE-2026-64711",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing apps to potentially leak sensitive user information was addressed through additional entitlement checks in iOS 26.6, iPadOS 26.6, and macOS versions including Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64711 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64711.json"
        }
      ],
      "title": "CVE-2026-64711"
    },
    {
      "cve": "CVE-2026-64713",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.6 and related OS versions implemented improved checks to fix the issue where websites could detect if a user had previously visited a link, enhancing user privacy.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64713 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64713.json"
        }
      ],
      "title": "CVE-2026-64713"
    },
    {
      "cve": "CVE-2026-64716",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability caused by processing a maliciously crafted image was resolved through improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and related releases.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64716 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64716.json"
        }
      ],
      "title": "CVE-2026-64716"
    },
    {
      "cve": "CVE-2026-64718",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed through improved memory management in multiple Apple OS versions including Safari 26.6 and iOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64718 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64718.json"
        }
      ],
      "title": "CVE-2026-64718"
    },
    {
      "cve": "CVE-2026-64719",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds access vulnerability in Safari 26.6 and related OS versions was addressed by implementing improved bounds checking to prevent crashes triggered by malicious web content.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64719 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64719.json"
        }
      ],
      "title": "CVE-2026-64719"
    },
    {
      "cve": "CVE-2026-64720",
      "notes": [
        {
          "category": "description",
          "text": "A race condition causing potential unexpected system termination was resolved by enhancing state handling in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64720 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64720.json"
        }
      ],
      "title": "CVE-2026-64720"
    },
    {
      "cve": "CVE-2026-64721",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability allowing apps to potentially access sensitive user data was addressed through improved state management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.6 and related updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64721 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64721.json"
        }
      ],
      "title": "CVE-2026-64721"
    },
    {
      "cve": "CVE-2026-64722",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in processing 3D models was addressed through improved memory handling in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6, preventing potential disclosure of process memory.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64722 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64722.json"
        }
      ],
      "title": "CVE-2026-64722"
    },
    {
      "cve": "CVE-2026-64724",
      "notes": [
        {
          "category": "description",
          "text": "A denial-of-service vulnerability caused by improper memory handling was resolved in multiple Apple operating systems including iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64724 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64724.json"
        }
      ],
      "title": "CVE-2026-64724"
    },
    {
      "cve": "CVE-2026-64725",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple OS versions was fixed by improving bounds checking, preventing an app from causing a denial-of-service condition.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64725 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64725.json"
        }
      ],
      "title": "CVE-2026-64725"
    },
    {
      "cve": "CVE-2026-64726",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability exploitable by an attacker in physical proximity was addressed through enhanced memory handling in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64726 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64726.json"
        }
      ],
      "title": "CVE-2026-64726"
    },
    {
      "cve": "CVE-2026-64728",
      "notes": [
        {
          "category": "description",
          "text": "A permissions issue in Safari 26.6 and related OS versions was fixed by improving validation to prevent malicious web content from violating iframe sandboxing policy.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64728 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64728.json"
        }
      ],
      "title": "CVE-2026-64728"
    },
    {
      "cve": "CVE-2026-64729",
      "notes": [
        {
          "category": "description",
          "text": "A use after free vulnerability in iOS 26.6 and related OS versions was resolved by improving memory handling to prevent apps from causing unexpected system termination.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64729 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64729.json"
        }
      ],
      "title": "CVE-2026-64729"
    },
    {
      "cve": "CVE-2026-64730",
      "notes": [
        {
          "category": "description",
          "text": "Safari 26.6 and related Apple operating systems addressed UI spoofing vulnerabilities caused by malicious website framing through improved user interface protections.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64730 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64730.json"
        }
      ],
      "title": "CVE-2026-64730"
    },
    {
      "cve": "CVE-2026-64732",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in iPhone Mirroring allowed attackers with physical access to retrieve sensitive user data, which was resolved by improved state management in iOS 26.6 and iPadOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64732 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64732.json"
        }
      ],
      "title": "CVE-2026-64732"
    },
    {
      "cve": "CVE-2026-64733",
      "notes": [
        {
          "category": "description",
          "text": "A user fingerprinting vulnerability in multiple Apple operating systems was addressed by enhancing data protection in versions 26.6 to prevent privacy risks.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64733 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64733.json"
        }
      ],
      "title": "CVE-2026-64733"
    },
    {
      "cve": "CVE-2026-64734",
      "notes": [
        {
          "category": "description",
          "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS were updated with improved checks to fix sensitive data leakage caused by processing maliciously crafted contacts.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64734 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64734.json"
        }
      ],
      "title": "CVE-2026-64734"
    },
    {
      "cve": "CVE-2026-64735",
      "notes": [
        {
          "category": "description",
          "text": "An inconsistent user interface issue in multiple Apple OS versions was fixed by improving state management to prevent remote attackers from bypassing network filters.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64735 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64735.json"
        }
      ],
      "title": "CVE-2026-64735"
    },
    {
      "cve": "CVE-2026-64739",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability causing unexpected application termination was resolved by enhanced bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS 26.6 and related updates.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64739 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64739.json"
        }
      ],
      "title": "CVE-2026-64739"
    },
    {
      "cve": "CVE-2026-64740",
      "notes": [
        {
          "category": "description",
          "text": "A parsing issue in directory path handling was fixed with improved validation in multiple Apple operating systems to prevent malicious apps from escaping their sandbox environments.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64740 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64740.json"
        }
      ],
      "title": "CVE-2026-64740"
    },
    {
      "cve": "CVE-2026-64741",
      "notes": [
        {
          "category": "description",
          "text": "An issue allowing apps to read persistent device identifiers was resolved by implementing additional restrictions in iOS 16.6, iPadOS 16.6, tvOS 16.6, visionOS 16.6, and watchOS 16.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64741 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64741.json"
        }
      ],
      "title": "CVE-2026-64741"
    },
    {
      "cve": "CVE-2026-64742",
      "notes": [
        {
          "category": "description",
          "text": "The issue of apps potentially accessing sensitive user data was resolved by implementing HTTPS for network communication and fixed in iOS 16.6, iPadOS 16.6, tvOS 16.6, visionOS 16.6, and watchOS 16.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64742 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64742.json"
        }
      ],
      "title": "CVE-2026-64742"
    },
    {
      "cve": "CVE-2026-64743",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64743 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64743.json"
        }
      ],
      "title": "CVE-2026-64743"
    },
    {
      "cve": "CVE-2026-64746",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability allowing applications to add contacts without user consent was resolved through enhanced validation in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64746 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64746.json"
        }
      ],
      "title": "CVE-2026-64746"
    },
    {
      "cve": "CVE-2026-64747",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability allowing arbitrary code execution with kernel privileges was fixed by enhancing size validation across multiple OS versions.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64747 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64747.json"
        }
      ],
      "title": "CVE-2026-64747"
    },
    {
      "cve": "CVE-2026-64749",
      "notes": [
        {
          "category": "description",
          "text": "A memory handling vulnerability fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, and visionOS 26.6 could allow apps to cause unexpected system termination or kernel memory corruption.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64749 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64749.json"
        }
      ],
      "title": "CVE-2026-64749"
    },
    {
      "cve": "CVE-2026-64751",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption has been addressed in iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS version 26.6.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64751 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64751.json"
        }
      ],
      "title": "CVE-2026-64751"
    },
    {
      "cve": "CVE-2026-64754",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking to prevent denial-of-service attacks from maliciously crafted files.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64754 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64754.json"
        }
      ],
      "title": "CVE-2026-64754"
    },
    {
      "cve": "CVE-2026-64755",
      "notes": [
        {
          "category": "description",
          "text": "An authorization vulnerability in iOS 26.6 and iPadOS 26.6 that could allow unauthorized access to sensitive user data was addressed by enhancing state management mechanisms.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64755 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64755.json"
        }
      ],
      "title": "CVE-2026-64755"
    },
    {
      "cve": "CVE-2026-64757",
      "notes": [
        {
          "category": "description",
          "text": "A memory corruption vulnerability causing unexpected Safari crashes when processing malicious web content was fixed in Safari 26.6 and related OS versions through improved state management.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64757 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64757.json"
        }
      ],
      "title": "CVE-2026-64757"
    },
    {
      "cve": "CVE-2026-64758",
      "notes": [
        {
          "category": "description",
          "text": "An issue causing unexpected application termination when processing maliciously crafted files was resolved through improved bounds checks in iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64758 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64758.json"
        }
      ],
      "title": "CVE-2026-64758"
    },
    {
      "cve": "CVE-2026-64763",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple OS versions could allow arbitrary code execution or cause unexpected app termination when processing maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64763 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64763.json"
        }
      ],
      "title": "CVE-2026-64763"
    },
    {
      "cve": "CVE-2026-64764",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhanced bounds checking, preventing potential application crashes or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64764 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64764.json"
        }
      ],
      "title": "CVE-2026-64764"
    },
    {
      "cve": "CVE-2026-64765",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64765 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64765.json"
        }
      ],
      "title": "CVE-2026-64765"
    },
    {
      "cve": "CVE-2026-64766",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability in multiple Apple operating systems was fixed by enhancing input validation to prevent unexpected application termination or arbitrary code execution from maliciously crafted files.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64766 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64766.json"
        }
      ],
      "title": "CVE-2026-64766"
    },
    {
      "cve": "CVE-2026-64768",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 was fixed by improving input validation to prevent unexpected application termination.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64768 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64768.json"
        }
      ],
      "title": "CVE-2026-64768"
    },
    {
      "cve": "CVE-2026-64769",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 and later was fixed by implementing improved bounds checking to prevent application crashes and heap corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64769 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64769.json"
        }
      ],
      "title": "CVE-2026-64769"
    },
    {
      "cve": "CVE-2026-64770",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS 26.6 and later was fixed by implementing improved bounds checking to prevent application crashes and heap corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64770 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64770.json"
        }
      ],
      "title": "CVE-2026-64770"
    },
    {
      "cve": "CVE-2026-64771",
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability allowing remote attackers to cause application termination or heap corruption was fixed with improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.6 and 15.7.8.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64771 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64771.json"
        }
      ],
      "title": "CVE-2026-64771"
    },
    {
      "cve": "CVE-2026-64772",
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability allowing remote attackers to cause application crashes or heap corruption was addressed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.6 and 15.7.8.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64772 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64772.json"
        }
      ],
      "title": "CVE-2026-64772"
    },
    {
      "cve": "CVE-2026-64774",
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow vulnerability affecting multiple Apple operating systems was fixed by improved input validation to prevent application termination or heap corruption.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64774 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64774.json"
        }
      ],
      "title": "CVE-2026-64774"
    },
    {
      "cve": "CVE-2026-64775",
      "notes": [
        {
          "category": "description",
          "text": "A memory initialization flaw causing unexpected system termination was resolved in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6 via enhanced memory management.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64775 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64775.json"
        }
      ],
      "title": "CVE-2026-64775"
    },
    {
      "cve": "CVE-2026-64783",
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed in Safari 26.6 and related OS versions through improved memory management.",
          "title": "Summary"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1",
          "CSAFPID-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-64783 | NCSC-NL Website",
          "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64783.json"
        }
      ],
      "title": "CVE-2026-64783"
    }
  ]
}