Threat database

CVE-2026-86903 is a medium severity vulnerability in Apple iOS and iPadOS where an out-of-bounds read could allow an app to disclose kernel memory. The issue was addressed by improved input validation and is fixed in iOS 27 and iPadOS 27.

CVE-2026-86889 is a certificate validation vulnerability in Apple macOS that could allow an attacker in a privileged network position to intercept network traffic. The issue is addressed by improved certificate validation and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 4.8.

CVE-2026-84621 is an authorization vulnerability in Apple iOS and iPadOS that could allow an app to access sensitive user data without proper permission. The issue was addressed by Apple with improved access control mechanisms. Fixed versions include iOS 26.7 and later, iPadOS 26.7 and later, and macOS versions Golden Gate 27, Sequoia 15.8, and Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 5.5.

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper.

CVE-2026-65376 is a medium severity vulnerability in Apple macOS where an out-of-bounds read flaw could allow an application to cause unexpected system termination. The issue is addressed by improved bounds checking and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

CVE-2026-84549 is a high-severity vulnerability in Apple macOS where connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory. The issue is due to an out-of-bounds read, which has been fixed by improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

CVE-2026-65360 is a race condition vulnerability in Apple iOS and iPadOS that could allow an app to cause unexpected system termination. The issue affects multiple Apple operating systems and was addressed by improved state handling. The vulnerability has a medium severity rating with a CVSS score of 4.7. Fixed versions include iOS 26.7 and later, iPadOS 26.7 and later, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

CVE-2026-86870 is a heap buffer overflow vulnerability in Apple iOS and iPadOS that can cause unexpected app termination when processing a maliciously crafted file. The issue was addressed by improved bounds checking and fixed in iOS 26.7, iPadOS 26.7, iOS 27, and iPadOS 27. The vulnerability has a medium severity rating with a CVSS score of 6.5.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination.

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Opening a maliciously crafted file may cause unexpected process termination or disclose process memory.

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to capture Touch Bar content without authorization.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected app termination.