A type confusion issue was addressed with improved checks. (CVE-2026-64693)
A type confusion vulnerability identified as CVE-2026-64693 was addressed by improved checks in multiple Apple operating systems. The flaw could be triggered by processing a maliciously crafted image, potentially leading to a denial-of-service condition. The issue affects various Apple OS versions but has been fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
AI Analysis
Technical Summary
CVE-2026-64693 is a type confusion vulnerability (CWE-843) that was mitigated by implementing improved validation checks in affected Apple operating systems. Exploitation involves processing a specially crafted image that could cause a denial-of-service (DoS) impact. The vulnerability has a CVSS 3.1 base score of 5.5, indicating moderate severity. The attack vector requires local access with low complexity and no privileges but does require user interaction. Confidentiality and integrity are not impacted, only availability. The vendor has released fixes in specific OS versions listed in the description.
Potential Impact
Successful exploitation can cause denial-of-service by crashing or disrupting system processes when handling malicious images. There is no impact on confidentiality or integrity. The vulnerability requires local access and user interaction to trigger.
Mitigation Recommendations
This vulnerability is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Users and administrators should apply these official updates to remediate the issue. No additional mitigations are indicated by the vendor advisory.
A type confusion issue was addressed with improved checks. (CVE-2026-64693)
Description
A type confusion vulnerability identified as CVE-2026-64693 was addressed by improved checks in multiple Apple operating systems. The flaw could be triggered by processing a maliciously crafted image, potentially leading to a denial-of-service condition. The issue affects various Apple OS versions but has been fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6.
CVSS v3.1
Score 5.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-64693 is a type confusion vulnerability (CWE-843) that was mitigated by implementing improved validation checks in affected Apple operating systems. Exploitation involves processing a specially crafted image that could cause a denial-of-service (DoS) impact. The vulnerability has a CVSS 3.1 base score of 5.5, indicating moderate severity. The attack vector requires local access with low complexity and no privileges but does require user interaction. Confidentiality and integrity are not impacted, only availability. The vendor has released fixes in specific OS versions listed in the description.
Potential Impact
Successful exploitation can cause denial-of-service by crashing or disrupting system processes when handling malicious images. There is no impact on confidentiality or integrity. The vulnerability requires local access and user interaction to trigger.
Mitigation Recommendations
This vulnerability is fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Users and administrators should apply these official updates to remediate the issue. No additional mitigations are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-22gv-q46w-9pc3
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64693"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a83aa7dbf8831d539e32ae4
Added to database: 08/18/2026, 00:42:37 UTC
Last enriched: 08/18/2026, 00:58:05 UTC
Last updated: 08/18/2026, 01:52:42 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.