Search
Find a vulnerability
Search criteria
2 vulnerabilities found for APPLE-SA-07-27-2026-7 visionOS by Apple
GCVE-1988-2026-0293
Vulnerability from gna-1988 – Published: 2026-09-08 11:40 – Updated: 2026-09-09 10:11
VLAI
EPSS
VEX
Title
APPLE-SA-07-27-2026-7 visionOS 26.6
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-07-27-2026-7 visionOS 26.6
visionOS 26.6 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/128070.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts Framework
Available for: Apple Vision Pro (all models)
Impact: An app may be able to fingerprint the user
Description: This issue was addressed with improved data protection.
CVE-2026-64733: Rosyna Keller of Totally Not Malicious Software
(paradisefacade.com)
App Store
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved checks.
CVE-2026-43801: Rahul Raj
Audio
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)
AuthKit
Available for: Apple Vision Pro (all models)
Impact: An app may be able to fingerprint the user
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-43730: David Strnadel
AVEVideoEncoder
Available for: Apple Vision Pro (all models)
Impact: An app may be able to execute arbitrary code with kernel
privileges
Description: A buffer overflow was addressed with improved size
validation.
CVE-2026-64747: Franco Belman at Blackwing Intelligence
BackgroundAssets
Available for: Apple Vision Pro (all models)
Impact: An app may be able to delete files for which it does not have
permission
Description: A permissions issue was addressed with improved validation.
CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CloudAttestation
Available for: Apple Vision Pro (all models)
Impact: A maliciously crafted app may be able to bypass code signing
enforcement
Description: A validation issue was addressed with improved input
sanitization.
CVE-2026-43813: Anton Pakhunov
Contacts
Available for: Apple Vision Pro (all models)
Impact: An app may be able to add contacts without user authorization
Description: An authorization issue was addressed with improved
validation.
CVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel
Febrero
Contacts
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted contact may leak sensitive data
Description: The issue was addressed with improved checks.
CVE-2026-64734: Daniel Williams
CoreAudio
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted audio file may corrupt process
memory
Description: The issue was addressed with improved memory handling.
CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative
CoreAudio
Available for: Apple Vision Pro (all models)
Impact: Processing an audio stream in a maliciously crafted media file
may terminate the process
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43744: Mathis Mansière, an anonymous researcher
CoreAudio
Available for: Apple Vision Pro (all models)
Impact: A remote attacker may be able to cause unexpected system
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43803: Rahul Raj
CoreMedia
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2026-43711: James Duffy (@0x4A616D657344)
Foundation
Available for: Apple Vision Pro (all models)
Impact: A malicious app may be able to access protected user data
Description: The issue was addressed with improved input sanitization.
CVE-2026-43714: an anonymous researcher
FrontBoard
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed by using HTTPS when sending
information over the network.
CVE-2026-64742: Huỳnh Tấn Ngàn
Game Center
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved data protection.
CVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav
Jelezoglo
Heimdal
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-64692: Redon Gashi
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted texture may lead to unexpected
app termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day
Initiative
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted image may corrupt process
memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: The issue was addressed with improved bounds checks.
CVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted file may lead to a
denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64754: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted image may lead to a
denial-of-service
Description: A type confusion issue was addressed with improved checks.
CVE-2026-64693: Geonha Lee (@leegn4a)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64749: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd., Ashish Kunwar, Hiroki Imai (LAC Co., Ltd.),
hxr1
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-43778: f0r of MurphySec, Feng Xue and XGPT of ThreatBook,
Mahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki
Imai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), Fábio Luís @scanpt,
Nicolas Rabrenovic
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng
(@Peterpan0927) of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: A remote attacker may be able to bypass network filters
Description: An inconsistent user interface issue was addressed with
improved state management.
CVE-2026-64735: Gor Aleksanyan
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov,
jay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from
Appknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl)
with UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66)
with UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The
Hxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR
Labs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal
Kosiorek
CVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, 재영 정, @rootxran
(Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous
researcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at
Blackwing Intelligence, Christian Figueroa, Johnny Franks (@zeroxjf),
Ashmit Sharma & Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin
Bhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis
Haatainen, Huy Nguyen (@34306) of Calif.io
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek
CVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doupé of ASU SEFCOM,
Dun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR
Labs SG Pte. Ltd., Johnny Franks (@zeroxjf)
CVE-2026-64700: Asjid Kalam (@odinshell)
CVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-43817: Huy Nguyen (@34306) of Calif.io
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: The issue was addressed with improved input sanitization.
CVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: A remote user may be able to cause unexpected system termination
or corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: A memory initialization issue was addressed with improved
memory handling.
CVE-2026-64775: Ryan Hileman via Xint Code (xint.io)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: This issue was addressed with improved input validation.
CVE-2026-39868: Vladislav Shevchenko (Positive Technologies), Ye Zhang
(@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng
(@Peterpan0927) of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed through improved state management.
CVE-2026-64721: Lukas Gerlach
libarchive
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted file may result in disclosure
of process memory
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2026-4424
Libnotify
Available for: Apple Vision Pro (all models)
Impact: An attacker may be able to cause unexpected app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun
libxslt
Available for: Apple Vis
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | APPLE-SA-07-27-2026-7 visionOS |
Affected:
unknown
|
Relationships
reference
GCVE-1988-2026-0293 (this record)
- related CVE-2026-28979
- related CVE-2026-39868
- related CVE-2026-39872
- related CVE-2026-43663
- related CVE-2026-43673
- related CVE-2026-43676
- related CVE-2026-43699
- related CVE-2026-43700
- related CVE-2026-43701
- related CVE-2026-43703
- related CVE-2026-43704
- related CVE-2026-43705
- related CVE-2026-43706
- related CVE-2026-43707
- related CVE-2026-43708
- related CVE-2026-43709
- related CVE-2026-43711
- related CVE-2026-43712
- related CVE-2026-43713
- related CVE-2026-43714
- related CVE-2026-43715
- related CVE-2026-43718
- related CVE-2026-43720
- related CVE-2026-43721
- related CVE-2026-43723
- related CVE-2026-43724
- related CVE-2026-43725
- related CVE-2026-43726
- related CVE-2026-43727
- related CVE-2026-43729
- related CVE-2026-43730
- related CVE-2026-43731
- related CVE-2026-43732
- related CVE-2026-43734
- related CVE-2026-43735
- related CVE-2026-43739
- related CVE-2026-43740
- related CVE-2026-43742
- related CVE-2026-43744
- related CVE-2026-43745
- related CVE-2026-43769
- related CVE-2026-43778
- related CVE-2026-43780
- related CVE-2026-43796
- related CVE-2026-43799
- related CVE-2026-43801
- related CVE-2026-43803
- related CVE-2026-43804
- related CVE-2026-43807
- related CVE-2026-43810
- related CVE-2026-43812
- related CVE-2026-43813
- related CVE-2026-43816
- related CVE-2026-43817
- related CVE-2026-43821
- related CVE-2026-43822
- related CVE-2026-4424
- related CVE-2026-64692
- related CVE-2026-64693
- related CVE-2026-64700
- related CVE-2026-64707
- related CVE-2026-64709
- related CVE-2026-64713
- related CVE-2026-64716
- related CVE-2026-64718
- related CVE-2026-64719
- related CVE-2026-64721
- related CVE-2026-64724
- related CVE-2026-64725
- related CVE-2026-64726
- related CVE-2026-64728
- related CVE-2026-64729
- related CVE-2026-64730
- related CVE-2026-64733
- related CVE-2026-64734
- related CVE-2026-64735
- related CVE-2026-64739
- related CVE-2026-64741
- related CVE-2026-64742
- related CVE-2026-64743
- related CVE-2026-64746
- related CVE-2026-64747
- related CVE-2026-64749
- related CVE-2026-64751
- related CVE-2026-64754
- related CVE-2026-64757
- related CVE-2026-64758
- related CVE-2026-64763
- related CVE-2026-64764
- related CVE-2026-64765
- related CVE-2026-64766
- related CVE-2026-64768
- related CVE-2026-64769
- related CVE-2026-64770
- related CVE-2026-64771
- related CVE-2026-64772
- related CVE-2026-64774
- related CVE-2026-64775
- related CVE-2026-64783
{
"containers": {
"cna": {
"affected": [
{
"product": "APPLE-SA-07-27-2026-7 visionOS",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-07-27-2026-7 visionOS 26.6\n\nvisionOS 26.6 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/128070.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts Framework\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to fingerprint the user\nDescription: This issue was addressed with improved data protection.\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software\n(paradisefacade.com)\n\nApp Store\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-43801: Rahul Raj\n\nAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\nAuthKit\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to fingerprint the user\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-43730: David Strnadel\n\nAVEVideoEncoder\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\nBackgroundAssets\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nCloudAttestation\nAvailable for: Apple Vision Pro (all models)\nImpact: A maliciously crafted app may be able to bypass code signing\nenforcement\nDescription: A validation issue was addressed with improved input\nsanitization.\nCVE-2026-43813: Anton Pakhunov\n\nContacts\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to add contacts without user authorization\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel\nFebrero\n\nContacts\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted contact may leak sensitive data\nDescription: The issue was addressed with improved checks.\nCVE-2026-64734: Daniel Williams\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted audio file may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43744: Mathis Mansi\u00e8re, an anonymous researcher\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote attacker may be able to cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43803: Rahul Raj\n\nCoreMedia\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: A memory corruption issue was addressed with improved\nmemory handling.\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\nFoundation\nAvailable for: Apple Vision Pro (all models)\nImpact: A malicious app may be able to access protected user data\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43714: an anonymous researcher\n\nFrontBoard\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed by using HTTPS when sending\ninformation over the network.\nCVE-2026-64742: Hu\u1ef3nh T\u1ea5n Ng\u00e0n\n\nGame Center\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved data protection.\nCVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav\nJelezoglo\n\nHeimdal\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64692: Redon Gashi\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted texture may lead to unexpected\napp termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day\nInitiative\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-64758: \uc9c4\uaddc\uc815 (Gyujeong Jin, @G1uN4sh)\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may lead to a\ndenial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64754: PETOWORKS\uc758 Bugeun Choi (@Bugeun), Rahul Raj\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may lead to a\ndenial-of-service\nDescription: A type confusion issue was addressed with improved checks.\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64749: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd., Ashish Kunwar, Hiroki Imai (LAC Co., Ltd.),\nhxr1\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-43778: f0r of MurphySec, Feng Xue and XGPT of ThreatBook,\nMahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki\nImai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), F\u00e1bio Lu\u00eds @scanpt,\nNicolas Rabrenovic\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng\n(@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote attacker may be able to bypass network filters\nDescription: An inconsistent user interface issue was addressed with\nimproved state management.\nCVE-2026-64735: Gor Aleksanyan\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov,\njay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from\nAppknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl)\nwith UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66)\nwith UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The\nHxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR\nLabs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal\nKosiorek\nCVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, \uc7ac\uc601 \uc815, @rootxran\n(Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous\nresearcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at\nBlackwing Intelligence, Christian Figueroa, Johnny Franks (@zeroxjf),\nAshmit Sharma \u0026 Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin\nBhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis\nHaatainen, Huy Nguyen (@34306) of Calif.io\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek\nCVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doup\u00e9 of ASU SEFCOM,\nDun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR\nLabs SG Pte. Ltd., Johnny Franks (@zeroxjf)\nCVE-2026-64700: Asjid Kalam (@odinshell)\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43817: Huy Nguyen (@34306) of Calif.io\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-64775: Ryan Hileman via Xint Code (xint.io)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: This issue was addressed with improved input validation.\nCVE-2026-39868: Vladislav Shevchenko (Positive Technologies), Ye Zhang\n(@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng\n(@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed through improved state management.\nCVE-2026-64721: Lukas Gerlach\n\nlibarchive\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may result in disclosure\nof process memory\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-4424\n\nLibnotify\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker may be able to cause unexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun\n\nlibxslt\nAvailable for: Apple Vis"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T10:11:19Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/22"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/22"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/kb/HT214009"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Aug/22"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-07-27-2026-7 visionOS 26.6",
"x_gcve": [
{
"recordType": "reference",
"relationships": [
{
"destId": "CVE-2026-28979",
"type": "related"
},
{
"destId": "CVE-2026-39868",
"type": "related"
},
{
"destId": "CVE-2026-39872",
"type": "related"
},
{
"destId": "CVE-2026-43663",
"type": "related"
},
{
"destId": "CVE-2026-43673",
"type": "related"
},
{
"destId": "CVE-2026-43676",
"type": "related"
},
{
"destId": "CVE-2026-43699",
"type": "related"
},
{
"destId": "CVE-2026-43700",
"type": "related"
},
{
"destId": "CVE-2026-43701",
"type": "related"
},
{
"destId": "CVE-2026-43703",
"type": "related"
},
{
"destId": "CVE-2026-43704",
"type": "related"
},
{
"destId": "CVE-2026-43705",
"type": "related"
},
{
"destId": "CVE-2026-43706",
"type": "related"
},
{
"destId": "CVE-2026-43707",
"type": "related"
},
{
"destId": "CVE-2026-43708",
"type": "related"
},
{
"destId": "CVE-2026-43709",
"type": "related"
},
{
"destId": "CVE-2026-43711",
"type": "related"
},
{
"destId": "CVE-2026-43712",
"type": "related"
},
{
"destId": "CVE-2026-43713",
"type": "related"
},
{
"destId": "CVE-2026-43714",
"type": "related"
},
{
"destId": "CVE-2026-43715",
"type": "related"
},
{
"destId": "CVE-2026-43718",
"type": "related"
},
{
"destId": "CVE-2026-43720",
"type": "related"
},
{
"destId": "CVE-2026-43721",
"type": "related"
},
{
"destId": "CVE-2026-43723",
"type": "related"
},
{
"destId": "CVE-2026-43724",
"type": "related"
},
{
"destId": "CVE-2026-43725",
"type": "related"
},
{
"destId": "CVE-2026-43726",
"type": "related"
},
{
"destId": "CVE-2026-43727",
"type": "related"
},
{
"destId": "CVE-2026-43729",
"type": "related"
},
{
"destId": "CVE-2026-43730",
"type": "related"
},
{
"destId": "CVE-2026-43731",
"type": "related"
},
{
"destId": "CVE-2026-43732",
"type": "related"
},
{
"destId": "CVE-2026-43734",
"type": "related"
},
{
"destId": "CVE-2026-43735",
"type": "related"
},
{
"destId": "CVE-2026-43739",
"type": "related"
},
{
"destId": "CVE-2026-43740",
"type": "related"
},
{
"destId": "CVE-2026-43742",
"type": "related"
},
{
"destId": "CVE-2026-43744",
"type": "related"
},
{
"destId": "CVE-2026-43745",
"type": "related"
},
{
"destId": "CVE-2026-43769",
"type": "related"
},
{
"destId": "CVE-2026-43778",
"type": "related"
},
{
"destId": "CVE-2026-43780",
"type": "related"
},
{
"destId": "CVE-2026-43796",
"type": "related"
},
{
"destId": "CVE-2026-43799",
"type": "related"
},
{
"destId": "CVE-2026-43801",
"type": "related"
},
{
"destId": "CVE-2026-43803",
"type": "related"
},
{
"destId": "CVE-2026-43804",
"type": "related"
},
{
"destId": "CVE-2026-43807",
"type": "related"
},
{
"destId": "CVE-2026-43810",
"type": "related"
},
{
"destId": "CVE-2026-43812",
"type": "related"
},
{
"destId": "CVE-2026-43813",
"type": "related"
},
{
"destId": "CVE-2026-43816",
"type": "related"
},
{
"destId": "CVE-2026-43817",
"type": "related"
},
{
"destId": "CVE-2026-43821",
"type": "related"
},
{
"destId": "CVE-2026-43822",
"type": "related"
},
{
"destId": "CVE-2026-4424",
"type": "related"
},
{
"destId": "CVE-2026-64692",
"type": "related"
},
{
"destId": "CVE-2026-64693",
"type": "related"
},
{
"destId": "CVE-2026-64700",
"type": "related"
},
{
"destId": "CVE-2026-64707",
"type": "related"
},
{
"destId": "CVE-2026-64709",
"type": "related"
},
{
"destId": "CVE-2026-64713",
"type": "related"
},
{
"destId": "CVE-2026-64716",
"type": "related"
},
{
"destId": "CVE-2026-64718",
"type": "related"
},
{
"destId": "CVE-2026-64719",
"type": "related"
},
{
"destId": "CVE-2026-64721",
"type": "related"
},
{
"destId": "CVE-2026-64724",
"type": "related"
},
{
"destId": "CVE-2026-64725",
"type": "related"
},
{
"destId": "CVE-2026-64726",
"type": "related"
},
{
"destId": "CVE-2026-64728",
"type": "related"
},
{
"destId": "CVE-2026-64729",
"type": "related"
},
{
"destId": "CVE-2026-64730",
"type": "related"
},
{
"destId": "CVE-2026-64733",
"type": "related"
},
{
"destId": "CVE-2026-64734",
"type": "related"
},
{
"destId": "CVE-2026-64735",
"type": "related"
},
{
"destId": "CVE-2026-64739",
"type": "related"
},
{
"destId": "CVE-2026-64741",
"type": "related"
},
{
"destId": "CVE-2026-64742",
"type": "related"
},
{
"destId": "CVE-2026-64743",
"type": "related"
},
{
"destId": "CVE-2026-64746",
"type": "related"
},
{
"destId": "CVE-2026-64747",
"type": "related"
},
{
"destId": "CVE-2026-64749",
"type": "related"
},
{
"destId": "CVE-2026-64751",
"type": "related"
},
{
"destId": "CVE-2026-64754",
"type": "related"
},
{
"destId": "CVE-2026-64757",
"type": "related"
},
{
"destId": "CVE-2026-64758",
"type": "related"
},
{
"destId": "CVE-2026-64763",
"type": "related"
},
{
"destId": "CVE-2026-64764",
"type": "related"
},
{
"destId": "CVE-2026-64765",
"type": "related"
},
{
"destId": "CVE-2026-64766",
"type": "related"
},
{
"destId": "CVE-2026-64768",
"type": "related"
},
{
"destId": "CVE-2026-64769",
"type": "related"
},
{
"destId": "CVE-2026-64770",
"type": "related"
},
{
"destId": "CVE-2026-64771",
"type": "related"
},
{
"destId": "CVE-2026-64772",
"type": "related"
},
{
"destId": "CVE-2026-64774",
"type": "related"
},
{
"destId": "CVE-2026-64775",
"type": "related"
},
{
"destId": "CVE-2026-64783",
"type": "related"
}
],
"vulnId": "GCVE-1988-2026-0293",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/22",
"automated": true,
"contentSha256": "da2c350129029fa4308f6df35ea2d022edc32b98e588d4408fd70659909849a8",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/22",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-07-28T00:27:26Z"
}
},
{
"recordType": "advisory",
"vulnId": "gcve-1988-2026-0293"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-08T11:40:48Z",
"dateUpdated": "2026-09-09T10:11:19Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0293"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
GCVE-1988-2026-0045
Vulnerability from gna-1988 – Published: 2026-09-07 13:20 – Updated: 2026-09-09 10:11
VLAI
EPSS
VEX
Title
APPLE-SA-07-27-2026-7 visionOS 26.6
Summary
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
APPLE-SA-07-27-2026-7 visionOS 26.6
visionOS 26.6 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/en-us/128070.
Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.
Accounts Framework
Available for: Apple Vision Pro (all models)
Impact: An app may be able to fingerprint the user
Description: This issue was addressed with improved data protection.
CVE-2026-64733: Rosyna Keller of Totally Not Malicious Software
(paradisefacade.com)
App Store
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved checks.
CVE-2026-43801: Rahul Raj
Audio
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)
AuthKit
Available for: Apple Vision Pro (all models)
Impact: An app may be able to fingerprint the user
Description: A permissions issue was addressed with additional
restrictions.
CVE-2026-43730: David Strnadel
AVEVideoEncoder
Available for: Apple Vision Pro (all models)
Impact: An app may be able to execute arbitrary code with kernel
privileges
Description: A buffer overflow was addressed with improved size
validation.
CVE-2026-64747: Franco Belman at Blackwing Intelligence
BackgroundAssets
Available for: Apple Vision Pro (all models)
Impact: An app may be able to delete files for which it does not have
permission
Description: A permissions issue was addressed with improved validation.
CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab
CloudAttestation
Available for: Apple Vision Pro (all models)
Impact: A maliciously crafted app may be able to bypass code signing
enforcement
Description: A validation issue was addressed with improved input
sanitization.
CVE-2026-43813: Anton Pakhunov
Contacts
Available for: Apple Vision Pro (all models)
Impact: An app may be able to add contacts without user authorization
Description: An authorization issue was addressed with improved
validation.
CVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel
Febrero
Contacts
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted contact may leak sensitive data
Description: The issue was addressed with improved checks.
CVE-2026-64734: Daniel Williams
CoreAudio
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted audio file may corrupt process
memory
Description: The issue was addressed with improved memory handling.
CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative
CoreAudio
Available for: Apple Vision Pro (all models)
Impact: Processing an audio stream in a maliciously crafted media file
may terminate the process
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43744: Mathis Mansière, an anonymous researcher
CoreAudio
Available for: Apple Vision Pro (all models)
Impact: A remote attacker may be able to cause unexpected system
termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43803: Rahul Raj
CoreMedia
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted video file may lead to
unexpected app termination
Description: A memory corruption issue was addressed with improved
memory handling.
CVE-2026-43711: James Duffy (@0x4A616D657344)
Foundation
Available for: Apple Vision Pro (all models)
Impact: A malicious app may be able to access protected user data
Description: The issue was addressed with improved input sanitization.
CVE-2026-43714: an anonymous researcher
FrontBoard
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed by using HTTPS when sending
information over the network.
CVE-2026-64742: Huỳnh Tấn Ngàn
Game Center
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed with improved data protection.
CVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav
Jelezoglo
Heimdal
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause a denial-of-service
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-64692: Redon Gashi
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted texture may lead to unexpected
app termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day
Initiative
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted image may corrupt process
memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted file may lead to unexpected app
termination
Description: The issue was addressed with improved bounds checks.
CVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted file may lead to a
denial-of-service
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64754: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj
ImageIO
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted image may lead to a
denial-of-service
Description: A type confusion issue was addressed with improved checks.
CVE-2026-64693: Geonha Lee (@leegn4a)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64749: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd., Ashish Kunwar, Hiroki Imai (LAC Co., Ltd.),
hxr1
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-43778: f0r of MurphySec, Feng Xue and XGPT of ThreatBook,
Mahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki
Imai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), Fábio Luís @scanpt,
Nicolas Rabrenovic
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to disclose kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng
(@Peterpan0927) of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: A remote attacker may be able to bypass network filters
Description: An inconsistent user interface issue was addressed with
improved state management.
CVE-2026-64735: Gor Aleksanyan
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov,
jay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from
Appknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl)
with UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66)
with UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The
Hxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR
Labs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal
Kosiorek
CVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, 재영 정, @rootxran
(Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous
researcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at
Blackwing Intelligence, Christian Figueroa, Johnny Franks (@zeroxjf),
Ashmit Sharma & Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin
Bhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis
Haatainen, Huy Nguyen (@34306) of Calif.io
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek
CVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doupé of ASU SEFCOM,
Dun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR
Labs SG Pte. Ltd., Johnny Franks (@zeroxjf)
CVE-2026-64700: Asjid Kalam (@odinshell)
CVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: An out-of-bounds read was addressed with improved bounds
checking.
CVE-2026-43817: Huy Nguyen (@34306) of Calif.io
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: The issue was addressed with improved input sanitization.
CVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: An integer overflow was addressed with improved input
validation.
CVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: A remote user may be able to cause unexpected system termination
or corrupt kernel memory
Description: The issue was addressed with improved memory handling.
CVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)
of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination
Description: A memory initialization issue was addressed with improved
memory handling.
CVE-2026-64775: Ryan Hileman via Xint Code (xint.io)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
corrupt kernel memory
Description: This issue was addressed with improved input validation.
CVE-2026-39868: Vladislav Shevchenko (Positive Technologies), Ye Zhang
(@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng
(@Peterpan0927) of STAR Labs SG Pte. Ltd.
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to cause unexpected system termination or
write kernel memory
Description: A use after free issue was addressed with improved memory
management.
CVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)
Kernel
Available for: Apple Vision Pro (all models)
Impact: An app may be able to access sensitive user data
Description: This issue was addressed through improved state management.
CVE-2026-64721: Lukas Gerlach
libarchive
Available for: Apple Vision Pro (all models)
Impact: Processing a maliciously crafted file may result in disclosure
of process memory
Description: This is a vulnerability in open source code and Apple
Software is among the affected projects. The CVE-ID was assigned by a
third party. Learn more about the issue and CVE-ID at cve.org.
CVE-2026-4424
Libnotify
Available for: Apple Vision Pro (all models)
Impact: An attacker may be able to cause unexpected app termination
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun
libxslt
Available for: Apple Vis
Severity
No CVSS data available.
Assigner
References
8 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apple | APPLE-SA-07-27-2026-7 visionOS |
Affected:
unknown
|
{
"containers": {
"cna": {
"affected": [
{
"product": "APPLE-SA-07-27-2026-7 visionOS",
"vendor": "Apple",
"versions": [
{
"status": "affected",
"version": "unknown"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Apple Product Security via Fulldisclosure"
}
],
"descriptions": [
{
"lang": "en",
"value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-07-27-2026-7 visionOS 26.6\n\nvisionOS 26.6 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/en-us/128070.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts Framework\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to fingerprint the user\nDescription: This issue was addressed with improved data protection.\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software\n(paradisefacade.com)\n\nApp Store\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-43801: Rahul Raj\n\nAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\nAuthKit\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to fingerprint the user\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-43730: David Strnadel\n\nAVEVideoEncoder\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to execute arbitrary code with kernel\nprivileges\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\nBackgroundAssets\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to delete files for which it does not have\npermission\nDescription: A permissions issue was addressed with improved validation.\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity\u0027s WeBin lab\n\nCloudAttestation\nAvailable for: Apple Vision Pro (all models)\nImpact: A maliciously crafted app may be able to bypass code signing\nenforcement\nDescription: A validation issue was addressed with improved input\nsanitization.\nCVE-2026-43813: Anton Pakhunov\n\nContacts\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to add contacts without user authorization\nDescription: An authorization issue was addressed with improved\nvalidation.\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel\nFebrero\n\nContacts\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted contact may leak sensitive data\nDescription: The issue was addressed with improved checks.\nCVE-2026-64734: Daniel Williams\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted audio file may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing an audio stream in a maliciously crafted media file\nmay terminate the process\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43744: Mathis Mansi\u00e8re, an anonymous researcher\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote attacker may be able to cause unexpected system\ntermination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43803: Rahul Raj\n\nCoreMedia\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: A memory corruption issue was addressed with improved\nmemory handling.\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\nFoundation\nAvailable for: Apple Vision Pro (all models)\nImpact: A malicious app may be able to access protected user data\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43714: an anonymous researcher\n\nFrontBoard\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed by using HTTPS when sending\ninformation over the network.\nCVE-2026-64742: Hu\u1ef3nh T\u1ea5n Ng\u00e0n\n\nGame Center\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved data protection.\nCVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav\nJelezoglo\n\nHeimdal\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-64692: Redon Gashi\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted texture may lead to unexpected\napp termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day\nInitiative\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may corrupt process\nmemory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: The issue was addressed with improved bounds checks.\nCVE-2026-64758: \uc9c4\uaddc\uc815 (Gyujeong Jin, @G1uN4sh)\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may lead to a\ndenial-of-service\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64754: PETOWORKS\uc758 Bugeun Choi (@Bugeun), Rahul Raj\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may lead to a\ndenial-of-service\nDescription: A type confusion issue was addressed with improved checks.\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64749: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd., Ashish Kunwar, Hiroki Imai (LAC Co., Ltd.),\nhxr1\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-43778: f0r of MurphySec, Feng Xue and XGPT of ThreatBook,\nMahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki\nImai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), F\u00e1bio Lu\u00eds @scanpt,\nNicolas Rabrenovic\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to disclose kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng\n(@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote attacker may be able to bypass network filters\nDescription: An inconsistent user interface issue was addressed with\nimproved state management.\nCVE-2026-64735: Gor Aleksanyan\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov,\njay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from\nAppknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl)\nwith UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66)\nwith UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The\nHxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR\nLabs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal\nKosiorek\nCVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, \uc7ac\uc601 \uc815, @rootxran\n(Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous\nresearcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at\nBlackwing Intelligence, Christian Figueroa, Johnny Franks (@zeroxjf),\nAshmit Sharma \u0026 Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin\nBhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis\nHaatainen, Huy Nguyen (@34306) of Calif.io\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek\nCVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doup\u00e9 of ASU SEFCOM,\nDun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR\nLabs SG Pte. Ltd., Johnny Franks (@zeroxjf)\nCVE-2026-64700: Asjid Kalam (@odinshell)\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-43817: Huy Nguyen (@34306) of Calif.io\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: The issue was addressed with improved input sanitization.\nCVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: An integer overflow was addressed with improved input\nvalidation.\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote user may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-64775: Ryan Hileman via Xint Code (xint.io)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: This issue was addressed with improved input validation.\nCVE-2026-39868: Vladislav Shevchenko (Positive Technologies), Ye Zhang\n(@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng\n(@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)\n\nKernel\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed through improved state management.\nCVE-2026-64721: Lukas Gerlach\n\nlibarchive\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may result in disclosure\nof process memory\nDescription: This is a vulnerability in open source code and Apple\nSoftware is among the affected projects. The CVE-ID was assigned by a\nthird party. Learn more about the issue and CVE-ID at cve.org.\nCVE-2026-4424\n\nLibnotify\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker may be able to cause unexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun\n\nlibxslt\nAvailable for: Apple Vis"
}
],
"providerMetadata": {
"dateUpdated": "2026-09-09T10:11:19Z",
"orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"shortName": "VULNARCHIVE"
},
"references": [
{
"tags": [
"technical-description"
],
"url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/22"
},
{
"tags": [
"technical-description"
],
"url": "https://seclists.org/fulldisclosure/2026/Aug/22"
},
{
"url": "https://nmap.org/mailman/listinfo/fulldisclosure"
},
{
"url": "https://seclists.org/fulldisclosure/"
},
{
"url": "https://support.apple.com/100100"
},
{
"url": "https://support.apple.com/en-us/128070"
},
{
"url": "https://support.apple.com/kb/HT214009"
},
{
"url": "https://www.apple.com/support/security/pgp/"
}
],
"source": {
"defect": [
"https://seclists.org/fulldisclosure/2026/Aug/22"
],
"discovery": "EXTERNAL"
},
"title": "APPLE-SA-07-27-2026-7 visionOS 26.6",
"x_gcve": [
{
"recordType": "advisory",
"relationships": [],
"vulnId": "GCVE-1988-2026-0045",
"x_vulnarchive": {
"archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Aug/22",
"automated": true,
"contentSha256": "da2c350129029fa4308f6df35ea2d022edc32b98e588d4408fd70659909849a8",
"evidenceScore": 7,
"messageId": "",
"originalUrl": "https://seclists.org/fulldisclosure/2026/Aug/22",
"policy": "vulnarchive-1",
"sourceFormat": "text/html",
"sourcePublishedAt": "2026-07-28T00:27:26Z"
}
}
]
}
},
"cveMetadata": {
"assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
"assignerShortName": "VULNARCHIVE",
"datePublished": "2026-09-07T13:20:21Z",
"dateUpdated": "2026-09-09T10:11:19Z",
"state": "PUBLISHED",
"vulnId": "GCVE-1988-2026-0045"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}