An information leakage was addressed with additional validation. (CVE-2026-64760)
CVE-2026-64760 is an information leakage vulnerability in Apple operating systems that was addressed by additional validation. The flaw could allow an app with limited privileges to leak sensitive kernel state information. This issue affects versions prior to iOS and iPadOS 18.7.10, as well as earlier versions of related Apple OSes. The vulnerability has a medium severity rating with a CVSS score of 5.5. Apple fixed the issue in iOS 18.7.10, iPadOS 18.7.10, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
AI Analysis
Technical Summary
An information leakage vulnerability identified as CVE-2026-64760 was addressed by Apple through additional validation mechanisms. The vulnerability could allow an application with limited privileges to leak sensitive kernel state information, potentially exposing confidential system details. The issue affects Apple operating systems prior to iOS and iPadOS 18.7.10 and corresponding versions of macOS Golden Gate, tvOS, visionOS, and watchOS. Apple released fixes in iOS 18.7.10, iPadOS 18.7.10, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 to resolve this vulnerability. The CVSS v3.1 base score is 5.5, indicating medium severity, with an attack vector of local, low attack complexity, requiring low privileges and no user interaction, impacting confidentiality but not integrity or availability.
Potential Impact
An app with limited privileges may be able to leak sensitive kernel state information, potentially exposing confidential system details. This could aid an attacker in further attacks or reconnaissance but does not directly impact system integrity or availability.
Mitigation Recommendations
This vulnerability is fixed in iOS 18.7.10, iPadOS 18.7.10, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. Users and administrators should apply these updates to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
An information leakage was addressed with additional validation. (CVE-2026-64760)
Description
CVE-2026-64760 is an information leakage vulnerability in Apple operating systems that was addressed by additional validation. The flaw could allow an app with limited privileges to leak sensitive kernel state information. This issue affects versions prior to iOS and iPadOS 18.7.10, as well as earlier versions of related Apple OSes. The vulnerability has a medium severity rating with a CVSS score of 5.5. Apple fixed the issue in iOS 18.7.10, iPadOS 18.7.10, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
CVSS v3.1
Score 5.5medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An information leakage vulnerability identified as CVE-2026-64760 was addressed by Apple through additional validation mechanisms. The vulnerability could allow an application with limited privileges to leak sensitive kernel state information, potentially exposing confidential system details. The issue affects Apple operating systems prior to iOS and iPadOS 18.7.10 and corresponding versions of macOS Golden Gate, tvOS, visionOS, and watchOS. Apple released fixes in iOS 18.7.10, iPadOS 18.7.10, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 to resolve this vulnerability. The CVSS v3.1 base score is 5.5, indicating medium severity, with an attack vector of local, low attack complexity, requiring low privileges and no user interaction, impacting confidentiality but not integrity or availability.
Potential Impact
An app with limited privileges may be able to leak sensitive kernel state information, potentially exposing confidential system details. This could aid an attacker in further attacks or reconnaissance but does not directly impact system integrity or availability.
Mitigation Recommendations
This vulnerability is fixed in iOS 18.7.10, iPadOS 18.7.10, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27. Users and administrators should apply these updates to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8qv8-4847-2983
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64760"]
Threat ID: 6a83aa73bf8831d539e31cf1
Added to database: 08/18/2026, 00:42:27 UTC
Last enriched: 09/19/2026, 22:16:17 UTC
Last updated: 10/02/2026, 14:46:09 UTC
Views: 54
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.