CVE Intelligence

Apple vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Apple products: 1165 record(s), with severity, exploitation and fixes.

Macos 1020Iphone Os 667Ipados 646iOS and iPadOS 644Visionos 431Watchos 404Tvos 372Safari 172Mac Os X 57iOS 18Xcode 10Icloud 6Itunes 5Container 4Swiftnio Http/2 3iOS-1 2macOS Monterey 2Containerization 2Swift-crypto 2Private Cloud Compute Server Software 1Swiftnio Ssh 1Swiftnio 1Servicetalk 1Swiftnio Ssl 1Mac Os X Server 1macOS Tahoe 1macOS Sonoma 1macOS Sequoia 1watchOS-1 1iTunes for Windows 1Pages 1Keynote 1iCloud for Windows 1Compressor 1Private Cloud Compute 1Safari (v and ) 1Os X Server 1

Exploited only (KEV) →

CVE-2026-65412 Medium · 6.5 CWE-476 Sep 14, 2026
NULL Pointer Dereference in Apple Ipados
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service.
CVE-2026-65411 Medium · 5.5 CWE-22 Sep 14, 2026
Path Traversal in Apple Ipados
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system.
CVE-2026-65410 High · 7.5 CWE-248 Sep 14, 2026
The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS…
The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65409 Medium · 5.5 CWE-843 Sep 14, 2026
Type Confusion in Apple Ipados
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.
CVE-2026-65408 Medium · 5.5 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Ipados
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-65407 Medium · 5.5 CWE-416 Sep 14, 2026
Use After Free in Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27, watchOS 26.6, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65406 Medium · 5.5 CWE-693 Sep 14, 2026
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7…
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to access sensitive user data.
CVE-2026-65405 Medium · 5.5 CWE-457 Sep 14, 2026
Use of Uninitialized Variable in Apple Ipados
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to determine kernel memory layout.
CVE-2026-65404 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Ipados
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences.
CVE-2026-65403 Medium · 5.5 CWE-284 Sep 14, 2026
Improper Access Control in Apple Ipados
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.
CVE-2026-65402 Medium · 5.5 CWE-416 Sep 14, 2026
Use After Free in Apple Ipados
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65401 Medium · 5.5 CWE-362 Sep 14, 2026
Race Condition in Apple Macos
A race condition was addressed with improved state handling. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
CVE-2026-65399 Medium · 4.4 CWE-290 Sep 14, 2026
Authentication Bypass by Spoofing in Apple Ipados
A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper.
CVE-2026-65398 High · 7.8 CWE-120 Sep 14, 2026
Classic Buffer Overflow in Apple Ipados
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
CVE-2026-65395 Medium · 6.5 CWE-787 Sep 14, 2026
Out-of-bounds Write in Apple Ipados
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption.
CVE-2026-65393 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Xcode
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.
CVE-2026-65391 High · 8.8 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Safari
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65390 High · 8.8 CWE-190 Sep 14, 2026
Integer Overflow or Wraparound in Apple Safari
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVE-2026-65383 Medium · 4.4 CWE-284 Sep 14, 2026
Improper Access Control in Apple Macos
This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks.
CVE-2026-65382 Medium · 5.5 CWE-22 Sep 14, 2026
Path Traversal in Apple Macos
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65381 Critical · 10.0 CWE-862 Sep 14, 2026
Missing Authorization in Apple Macos
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox.
CVE-2026-65380 Medium · 5.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Macos
An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.
CVE-2026-65378 High · 7.5 CWE-863 Sep 14, 2026
Incorrect Authorization in Apple Macos
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.
CVE-2026-65377 Medium · 5.5 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Ipados
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.
CVE-2026-65376 Medium · 5.5 CWE-125 Sep 14, 2026
Out-of-bounds Read in Apple Macos
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.