Search

Find a vulnerability

Search criteria

    26024 vulnerabilities by apple

    GCVE-1988-2026-0474

    Vulnerability from gna-1988 – Published: 2026-11-02 07:30 – Updated: 2026-11-02 07:30
    VLAI
    Title
    SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail
    Summary
    SEC Consult Vulnerability Lab Research Announcement < 20261001 > ======================================================================= title: Arbitrary Email sender spoofing in Apple iCloud mail product: Apple iCloud mail (SMTP submission service) vulnerable version: iCloud mail infrastructure (cloud service) fixed version: Fixed by Apple (verified by SEC Consult, 2025-12-09) CVE number: None assigned impact: Sending of emails from arbitrary icloud.com addresses, passing SPF, DKIM and DMARC checks homepage: https://www.apple.com/ reported: 2024-05-21 (issue 1), 2024-12-07 (issue 2) by: Timo Longin (Office Vienna) SEC Consult Vulnerability Lab An integrated part of SEC Consult, an Atos business Europe | Asia https://www.sec-consult.com ======================================================================= Summary: -------- The SEC Consult Vulnerability Lab has published a blog post about two email spoofing vulnerabilities in Apple's iCloud mail infrastructure. They allowed an authenticated iCloud user to send emails from arbitrary icloud.com addresses. The spoofed messages passed SPF, DKIM and DMARC checks at the receiving side. The research builds on SMTP smuggling. Blog URL: --------- Full technical details here: https://r.sec-consult.com/icloud Vulnerability overview/description: ----------------------------------- 1) From header smuggling via bare CR characters iCloud's SMTP submission services handle a From header containing bare CR characters differently in two internal components. The component that authenticates the sender ignores the manipulated header, while a second component, which is likely Postfix-based, replaces standalone CR characters with CR LF. This pushes the legitimate From header into the message body and leaves the attacker-controlled From header as the one seen by the receiver. 2) From header smuggling via dot-stuffing handling ("dot-peeling") After Apple hardened the From header parsing of the first component, a second bypass was found. The first component does not honor the dot-stuffing rules of RFC 5321 section 4.5.2, which allowed the separation of header and body to be abused in the second component. Impact: ------- Both issues allowed sending emails as arbitrary icloud.com addresses. DKIM signatures are created after the message has been processed by the second component, therefore SPF, DKIM and DMARC checks all passed on the receiving side. Vendor contact timeline: ------------------------ 2024-05-21: Initial vulnerability report submitted to Apple: icloud.com SMTP services can be abused via CRLF injection in the From: header to send spoofed emails (e.g., admin () icloud com) with valid DKIM/DMARC. PoC files and script attached; credit line requested for Timo Longin / SEC Consult Vulnerability Lab. 2024-06-06: Follow-up requesting a status update and fix timeline; Apple responds that the issue is still under investigation and asks that details not be disclosed until fixed. 2024-06-27: Follow-up requesting a status update. 2024-06-29: Apple reports no new status update. 2024-08-01: SEC Consult confirms the PoC script no longer works and asks Apple to confirm a fix was made. 2024-08-09: Apple reports no new status update, thanks SEC Consult for patience. 2024-09-01: Follow-up requesting a status update. 2024-09-11: Apple reports still investigating, no new updates to share. 2024-10-07: Follow-up checking the issue hasn't been forgotten. 2024-10-08: SEC Consult notes an upcoming SMTP smuggling talk at IT-SECX (Oct 11) that will not disclose new vulnerability details; asks Apple for a fix timeline. 2024-10-17: Apple states changes have been made and asks SEC Consult to confirm current behavior. 2024-11-01: SEC Consult confirms the original PoC (CRLF injection in From: header) is no longer exploitable; proposes public disclosure at BSidesVienna on Nov 23, 2024, plus a blog post in December. 2024-11-04: Apple confirms the report as remediated and asks to review a draft of the planned disclosure. 2024-11-07: Draft BSidesVienna slides shared with Apple (attachment failed to send). 2024-11-09: Apple reports the attachment wasn't received; asks SEC Consult to resend. 2024-11-11: Slides resent; SEC Consult asks Apple for root-cause details (proprietary iCloud SMTP vs. third-party software). 2024-11-19: Apple confirms the report qualifies for the Apple Security Bounty and awards $15,000. 2024-12-06: SEC Consult discovers a second, related parsing issue enabling From-header spoofing via a different method; Apple asks that it be filed as a separate report. 2024-12-07: New report opened and tracked as OE196504222209; Apple acknowledges receipt. 2024-12-11: SEC Consult reports the deployed fix is insufficient - it merely blacklists the POC substring "admin" in the From: header rather than fixing the root parsing flaw, leaving most other @icloud.com addresses spoofable and potentially breaking mail for legitimate users with "admin" somewhere in their address. 2024-12-12: SEC Consult provides a new working PoC spoofing security () icloud com, with supporting screenshots, raw message, and script. 2024-12-16: Apple acknowledges the additional information and states it will follow up if further details are needed. 2025-01-28: SEC Consult shares further technical analysis, noting Postfix's smtpd_sender_login_maps limitations and recommending a Milter-based filter (e.g., milterfrom) that checks the From: header against the final email data before sending, as a likely root-cause fix. 2025-01-29: Apple acknowledges the analysis, states the issue is still under investigation. 2025-03-28: SEC Consult confirms the vulnerability is still exploitable. Apple replies (marked confidential) that a fix is planned for a future security update and asks that disclosure wait until it ships. 2025-04-04: SEC Consult agrees to hold disclosure and asks for a rough timeframe; Apple says more information will be available in the coming weeks. 2025-05-22: SEC Consult asks for an update, noting the issue remains exploitable. 2025-05-24: Apple reports an update was released in the prior 48 hours and asks SEC Consult to reassess whether the issue is remediated. 2025-06-10: Apple follows up again asking SEC Consult to confirm whether the update fixed the issue. 2025-06-13: SEC Consult confirms a bypass still exists, working the same way as described in report OE196504222209; Apple acknowledges and says it will review. 2025-07-17: SEC Consult asks for a fix update, noting a conference talk planned in about two months. 2025-07-22: Apple states the issue is still under investigation and reminds SEC Consult that bounty eligibility requires no public disclosure before an update ships with a security advisory. 2025-09-10: SEC Consult reports the conference talk was cancelled and asks for a status update. 2025-09-12: Apple replies (marked confidential) that a fix is planned for a future security update "in the near future" and again asks for continued non-disclosure. 2025-10-08: SEC Consult reports the vulnerability is still exploitable and asks whether the update has shipped. 2025-10-10: Apple states changes are being implemented and more information will follow soon. 2025-11-11: SEC Consult confirms the previous PoC spoofing method no longer works; asks Apple to confirm the fix is fully rolled out. 2025-11-12: Apple confirms the updates have been pushed out and asks SEC Consult to review. 2025-11-14: SEC Consult confirms they will review the fix. 2025-12-09: SEC Consult confirms the deployed fixes remediate the original issue. 2026-10-01: Public release of blog post. Solution: --------- Apple has fixed the vulnerabilities in its iCloud mail infrastructure. No CVE was assigned. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SEC Consult Vulnerability Lab An integrated part of SEC Consult, an Atos business Europe | Asia About SEC Consult Vulnerability Lab The SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an Atos business. It ensures the continued knowledge gain of SEC Consult in the field of network and application security to stay ahead of the attacker. The SEC Consult Vulnerability Lab supports high-quality penetration testing and the evaluation of new offensive and defensive technologies for our customers. Hence our customers obtain the most current information about vulnerabilities and valid recommendation about the risk profile of new technologies. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Interested to work with the experts of SEC Consult? Send us your application https://sec-consult.com/career/ Interested in improving your cyber security with the experts of SEC Consult? Contact our local offices https://sec-consult.com/contact/ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Mail: security-research at sec-consult dot com Web: https://www.sec-consult.com Blog: https://blog.sec-consult.com X: https://x.com/sec_consult EOF Timo Longin / @2026 _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Credits
    SEC Consult Vulnerability Lab via Fulldisclosure
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iCloud mail (SMTP submission service)",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "SEC Consult Vulnerability Lab via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SEC Consult Vulnerability Lab Research Announcement \u003c 20261001 \u003e\n=======================================================================\n              title: Arbitrary Email sender spoofing in Apple iCloud mail\n            product: Apple iCloud mail (SMTP submission service)\n vulnerable version: iCloud mail infrastructure (cloud service)\n      fixed version: Fixed by Apple (verified by SEC Consult, 2025-12-09)\n         CVE number: None assigned\n             impact: Sending of emails from arbitrary icloud.com addresses,\n                     passing SPF, DKIM and DMARC checks\n           homepage: https://www.apple.com/\n           reported: 2024-05-21 (issue 1), 2024-12-07 (issue 2)\n                 by: Timo Longin (Office Vienna)\n                     SEC Consult Vulnerability Lab\n\n                     An integrated part of SEC Consult, an Atos business\n                     Europe | Asia\n\n                     https://www.sec-consult.com\n\n=======================================================================\n\nSummary:\n--------\nThe SEC Consult Vulnerability Lab has published a blog post about two\nemail spoofing vulnerabilities in Apple\u0027s iCloud mail infrastructure.\nThey allowed an authenticated iCloud user to send emails from arbitrary\nicloud.com addresses. The spoofed messages passed SPF, DKIM and DMARC\nchecks at the receiving side. The research builds on SMTP smuggling.\n\n\nBlog URL:\n---------\nFull technical details here:\nhttps://r.sec-consult.com/icloud\n\n\nVulnerability overview/description:\n-----------------------------------\n1) From header smuggling via bare CR characters\niCloud\u0027s SMTP submission services handle a From header containing bare\nCR characters differently in two internal components. The component\nthat authenticates the sender ignores the manipulated header, while a\nsecond component, which is likely Postfix-based, replaces standalone CR\ncharacters with CR LF. This pushes the legitimate From header into the\nmessage body and leaves the attacker-controlled From header as the one\nseen by the receiver.\n\n2) From header smuggling via dot-stuffing handling (\"dot-peeling\")\nAfter Apple hardened the From header parsing of the first component, a\nsecond bypass was found. The first component does not honor the\ndot-stuffing rules of RFC 5321 section 4.5.2, which allowed the\nseparation of header and body to be abused in the second component.\n\n\nImpact:\n-------\nBoth issues allowed sending emails as arbitrary icloud.com addresses.\nDKIM signatures are created after the message has been processed by the\nsecond component, therefore SPF, DKIM and DMARC checks all passed on the\nreceiving side.\n\n\nVendor contact timeline:\n------------------------\n2024-05-21: Initial vulnerability report submitted to Apple: icloud.com SMTP\n            services can be abused via CRLF injection in the From: header to\n            send spoofed emails (e.g., admin () icloud com) with valid DKIM/DMARC.\n            PoC files and script attached; credit line requested for Timo Longin\n            / SEC Consult Vulnerability Lab.\n2024-06-06: Follow-up requesting a status update and fix timeline; Apple\n            responds that the issue is still under investigation and asks that\n            details not be disclosed until fixed.\n2024-06-27: Follow-up requesting a status update.\n2024-06-29: Apple reports no new status update.\n2024-08-01: SEC Consult confirms the PoC script no longer works and asks Apple\n            to confirm a fix was made.\n2024-08-09: Apple reports no new status update, thanks SEC Consult for patience.\n2024-09-01: Follow-up requesting a status update.\n2024-09-11: Apple reports still investigating, no new updates to share.\n2024-10-07: Follow-up checking the issue hasn\u0027t been forgotten.\n2024-10-08: SEC Consult notes an upcoming SMTP smuggling talk at IT-SECX (Oct\n            11) that will not disclose new vulnerability details; asks Apple for\n            a fix timeline.\n2024-10-17: Apple states changes have been made and asks SEC Consult to confirm\n            current behavior.\n2024-11-01: SEC Consult confirms the original PoC (CRLF injection in From:\n            header) is no longer exploitable; proposes public disclosure at\n            BSidesVienna on Nov 23, 2024, plus a blog post in December.\n2024-11-04: Apple confirms the report as remediated and asks to review a draft\n            of the planned disclosure.\n2024-11-07: Draft BSidesVienna slides shared with Apple (attachment failed to\n            send).\n2024-11-09: Apple reports the attachment wasn\u0027t received; asks SEC Consult to\n            resend.\n2024-11-11: Slides resent; SEC Consult asks Apple for root-cause details\n            (proprietary iCloud SMTP vs. third-party software).\n2024-11-19: Apple confirms the report qualifies for the Apple Security Bounty\n            and awards $15,000.\n2024-12-06: SEC Consult discovers a second, related parsing issue enabling\n            From-header spoofing via a different method; Apple asks that it be\n            filed as a separate report.\n2024-12-07: New report opened and tracked as OE196504222209; Apple acknowledges\n            receipt.\n2024-12-11: SEC Consult reports the deployed fix is insufficient - it merely\n            blacklists the POC substring \"admin\" in the From: header rather than\n            fixing the root parsing flaw, leaving most other @icloud.com\n            addresses spoofable and potentially breaking mail for legitimate\n            users with \"admin\" somewhere in their address.\n2024-12-12: SEC Consult provides a new working PoC spoofing security () icloud com,\n            with supporting screenshots, raw message, and script.\n2024-12-16: Apple acknowledges the additional information and states it will\n            follow up if further details are needed.\n2025-01-28: SEC Consult shares further technical analysis, noting Postfix\u0027s\n            smtpd_sender_login_maps limitations and recommending a Milter-based\n            filter (e.g., milterfrom) that checks the From: header against the\n            final email data before sending, as a likely root-cause fix.\n2025-01-29: Apple acknowledges the analysis, states the issue is still under\n            investigation.\n2025-03-28: SEC Consult confirms the vulnerability is still exploitable. Apple\n            replies (marked confidential) that a fix is planned for a future\n            security update and asks that disclosure wait until it ships.\n2025-04-04: SEC Consult agrees to hold disclosure and asks for a rough\n            timeframe; Apple says more information will be available in the\n            coming weeks.\n2025-05-22: SEC Consult asks for an update, noting the issue remains\n            exploitable.\n2025-05-24: Apple reports an update was released in the prior 48 hours and asks\n            SEC Consult to reassess whether the issue is remediated.\n2025-06-10: Apple follows up again asking SEC Consult to confirm whether the\n            update fixed the issue.\n2025-06-13: SEC Consult confirms a bypass still exists, working the same way as\n            described in report OE196504222209; Apple acknowledges and says it\n            will review.\n2025-07-17: SEC Consult asks for a fix update, noting a conference talk planned\n            in about two months.\n2025-07-22: Apple states the issue is still under investigation and reminds SEC\n            Consult that bounty eligibility requires no public disclosure before\n            an update ships with a security advisory.\n2025-09-10: SEC Consult reports the conference talk was cancelled and asks for a\n            status update.\n2025-09-12: Apple replies (marked confidential) that a fix is planned for a\n            future security update \"in the near future\" and again asks for\n            continued non-disclosure.\n2025-10-08: SEC Consult reports the vulnerability is still exploitable and asks\n            whether the update has shipped.\n2025-10-10: Apple states changes are being implemented and more information will\n            follow soon.\n2025-11-11: SEC Consult confirms the previous PoC spoofing method no longer\n            works; asks Apple to confirm the fix is fully rolled out.\n2025-11-12: Apple confirms the updates have been pushed out and asks SEC Consult\n            to review.\n2025-11-14: SEC Consult confirms they will review the fix.\n2025-12-09: SEC Consult confirms the deployed fixes remediate the original\n            issue.\n2026-10-01: Public release of blog post.\n\n\n\nSolution:\n---------\nApple has fixed the vulnerabilities in its iCloud mail infrastructure.\nNo CVE was assigned.\n\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nSEC Consult Vulnerability Lab\nAn integrated part of SEC Consult, an Atos business\nEurope | Asia\n\nAbout SEC Consult Vulnerability Lab\nThe SEC Consult Vulnerability Lab is an integrated part of SEC Consult, an\nAtos business. It ensures the continued knowledge gain of SEC Consult in the\nfield of network and application security to stay ahead of the attacker. The\nSEC Consult Vulnerability Lab supports high-quality penetration testing and\nthe evaluation of new offensive and defensive technologies for our customers.\nHence our customers obtain the most current information about vulnerabilities\nand valid recommendation about the risk profile of new technologies.\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\nInterested to work with the experts of SEC Consult?\nSend us your application https://sec-consult.com/career/\n\nInterested in improving your cyber security with the experts of SEC Consult?\nContact our local offices https://sec-consult.com/contact/\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nMail: security-research at sec-consult dot com\nWeb: https://www.sec-consult.com\nBlog: https://blog.sec-consult.com\nX: https://x.com/sec_consult\n\nEOF Timo Longin / @2026\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:30:01Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description",
            "exploit"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/1"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/1"
        },
        {
          "url": "https://blog.sec-consult.com"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://r.sec-consult.com/icloud"
        },
        {
          "url": "https://sec-consult.com/career/"
        },
        {
          "url": "https://sec-consult.com/contact/"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://www.apple.com/"
        },
        {
          "url": "https://www.sec-consult.com"
        },
        {
          "url": "https://x.com/sec_consult"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/1"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [],
          "vulnId": "GCVE-1988-2026-0474",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/1",
            "automated": true,
            "contentSha256": "0ed62a147fa946c4ca0b2152a82a5d1d71a144d5f543fde73e61c1f8ba39986a",
            "evidenceScore": 8,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/1",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-01T12:08:33Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:30:01Z",
    "dateUpdated": "2026-11-02T07:30:01Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0474"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0462

    Vulnerability from gna-1988 – Published: 2026-11-02 07:30 – Updated: 2026-11-02 07:30
    VLAI
    Title
    APPLE-SA-10-26-2026-10 Safari 27.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-10 Safari 27.2 Safari 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149527. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. LinkPresentation Available for: macOS Sequoia and macOS Tahoe Impact: Processing a maliciously crafted image may result in memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112621: Vinay Kumar Rasala (Xplo8E) from Appknox, an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 328114 CVE-2026-113904: Lily Cohl (@GenericCoding), Do Young Park (adawn), MYUNGYONG LEE, Luke Francis (@lukefr09), Shubham Chaskar, Kwak Kiyong, Song Nuri WebKit Bugzilla: 317465 CVE-2026-112599: Avinash Kumar Thapa & Jay Kaushik Patel WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to memory corruption Description: A type confusion issue was addressed with improved checks. WebKit Bugzilla: 321609 CVE-2026-86974: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 318331 CVE-2026-86986: an anonymous researcher WebKit Bugzilla: 328131 CVE-2026-112693: 은태 장 WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: This issue was addressed with improved input validation. WebKit Bugzilla: 318522 CVE-2026-86985: Pasquale Scola WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. WebKit Bugzilla: 323130 CVE-2026-112699: an anonymous researcher WebKit Bugzilla: 323148 CVE-2026-112680: Franz Bettag, Kwak Kiyong, Song Nuri WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 322916 CVE-2026-112697: OpenAI Codex Security - Amy Burnett, 은태 장 WebKit Bugzilla: 324150 CVE-2026-112655: Euntae Jang WebKit Bugzilla: 322120 CVE-2026-112651: Euntae Jang WebKit Bugzilla: 323265 CVE-2026-112623: pwn2addr, Lily Cohl (@GenericCoding) WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A race condition was addressed with improved locking. WebKit Bugzilla: 323986 CVE-2026-112686: an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: This issue was addressed through improved state management. WebKit Bugzilla: 328132 CVE-2026-112684: Gia Bui (@yabeow) from Calif.io WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A type confusion issue was addressed with improved state handling. WebKit Bugzilla: 322033 CVE-2026-112673: Myungyong Lee WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash Description: A race condition was addressed with improved state handling. WebKit Bugzilla: 323173 CVE-2026-112669: remanone (@remanone_) WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process termination Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 322671 CVE-2026-112695: Josef Korbel (Citadelo), Luke Francis (@lukefr09) WebKit Bugzilla: 321669 CVE-2026-112666: Luke Francis (@lukefr09) WebKit Bugzilla: 321934 CVE-2026-112654: Charles Kern WebKit Bugzilla: 323227 CVE-2026-112653: Malik M. (@m411k_) WebKit Bugzilla: 324735 CVE-2026-112615: Chris Rohlf with Anthropic Research WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved memory handling. WebKit Bugzilla: 321982 CVE-2026-112659: OpenAI Codex Security - Amy Burnett, Chris Rohlf with Anthropic Research WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to memory corruption Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 324262 CVE-2026-112640: an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: A website may be able to use a media format that should be restricted in Lockdown Mode Description: A logic issue was addressed with improved checks. WebKit Bugzilla: 324004 CVE-2026-113952: Drinor Selmanaj (Sentry) WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to memory corruption Description: A type confusion issue was addressed with improved state management. WebKit Bugzilla: 323097 CVE-2026-113949: an anonymous researcher WebKit Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to unexpected memory modification Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 321652 CVE-2026-113903: Eddy Tsalolikhin, OpenAI Codex Security - Amy Burnett, Lily Cohl (@GenericCoding) WebKit Canvas Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 323377 CVE-2026-112637: Chris Rohlf with Anthropic Research, 은태 장 WebKit JavaScript Bindings Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 328141 CVE-2026-112626: Euntae Jang, Luke Francis (@lukefr09), Shubham Chaskar, Josef Korbel (Citadelo) WebKit Process Model Available for: macOS Sequoia and macOS Tahoe Impact: A remote attacker may be able to break out of Web Content sandbox Description: This issue was addressed by removing the vulnerable code. WebKit Bugzilla: 328129 CVE-2026-113897: Luke Francis, Jackson Kuja WebKit Process Model Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 322743 CVE-2026-112639: Luke Francis (@lukefr09) WebRTC Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: A use-after-free issue was addressed with improved memory management. WebKit Bugzilla: 323096 CVE-2026-113901: Kwak Kiyong (@Pwnkai23), Song Nuri WebRTC Available for: macOS Sequoia and macOS Tahoe Impact: Processing maliciously crafted web content may lead to an unexpected process crash Description: An out-of-bounds read was addressed with improved bounds checking. WebKit Bugzilla: 323079 CVE-2026-86973: Narendra Singh (@_3P1C), an anonymous researcher Additional recognition Safari We would like to acknowledge Azza Tegar Naufal Ataullah, Exell Nakano, Zhiyang Zeng (@Wester), satrya wira yudha for their assistance. Service Workers We would like to acknowledge Meta Red Team X - Nik Tsytsarkin for their assistance. WebKit We would like to acknowledge Claudio Bozzato and Francesco Benvenuto of Cisco Talos, Stan Shaw, Volodymyr Diachenko, Wael Alolowi, an anonymous researcher for their assistance. WebKit Sandboxing We would like to acknowledge Claudio Bozzato and Francesco Benvenuto of Cisco Talos for their assistance. Safari 27.2 may be obtained from the Mac App Store. All information is also posted on the Apple Security Releases web site: https://support.apple.com/100100. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmrfvT8ACgkQ4Ifiq8DH 7PXDFA/+JiE7IlJGXWwjUx9eCynW8wNj17bncAZH5uc1pF/Q2ERnHfzD+53oqxHS P8DVfaLHFYmlPwzV2saWnB9Jlv3sGzCt4X9qCNwM3koxOnXbJFXuzKi047e624hC +6ykLYII0DlogFli9TjrHCXRWMzLhb04erqFYfvr8HXpq3pEE4mH3TVLfhNbR0v3 SPqSrnbsg81mlFMhhJ9D4C78OcRveZVv1/QHYJeHtLyB+OfW1UYM9/Lu0SvdCeEI HeLP1W2xTBpgpVfl4KK3+d9J/O7uao/1MR8EuvrM6J/sevK8k1d6IYnjhqEHTjNI f0/IcjCUWT3TNGjtgJT9lUbbXV8UXoOVMLHv8XubyZZxf0bYD1F2VusYJfUcLIbh yrNby3kEkj0jeiVIHmQgY+OxoKpVvReerHkZuZfALJ3ffsZFKuz4/cJVME6AiZ8k rx+bSRAaKa/29HSmU4m2WHyFjD8VySI5jI7oJ05my6yCitbz6QkKmqCNGhsCQzJC qEvjkq3T2oPmPY27Y7FfMDN7A/WTXE6XPHGtAAOWrChtQtFWJd21hPOn00DZjN63 1C1LOeqa0QQrDOpa2QnDu9pMblo5CaJpGLxtVPHu0ibnwYiuHlOi6IFQZ6CfsajG GVhDV2NO3QJJ2VUJ6bQppNg+2YvlvATURMl96cFFAoYObIuAfgE= =epcU -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Safari Affected: unknown
    		Create a notification for this product.
    Credits
    Apple Product Security via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0462 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-10 Safari 27.2\n\nSafari 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149527.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nLinkPresentation\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing a maliciously crafted image may result in memory\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112621: Vinay Kumar Rasala (Xplo8E) from Appknox, an anonymous\nresearcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 328114\nCVE-2026-113904: Lily Cohl (@GenericCoding), Do Young Park (adawn),\nMYUNGYONG LEE, Luke Francis (@lukefr09), Shubham Chaskar, Kwak Kiyong,\nSong Nuri\nWebKit Bugzilla: 317465\nCVE-2026-112599: Avinash Kumar Thapa \u0026 Jay Kaushik Patel\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to memory\ncorruption\nDescription: A type confusion issue was addressed with improved checks.\nWebKit Bugzilla: 321609\nCVE-2026-86974: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected Safari crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 318331\nCVE-2026-86986: an anonymous researcher\nWebKit Bugzilla: 328131\nCVE-2026-112693: \uc740\ud0dc \uc7a5\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: This issue was addressed with improved input validation.\nWebKit Bugzilla: 318522\nCVE-2026-86985: Pasquale Scola\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nWebKit Bugzilla: 323130\nCVE-2026-112699: an anonymous researcher\nWebKit Bugzilla: 323148\nCVE-2026-112680: Franz Bettag, Kwak Kiyong, Song Nuri\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 322916\nCVE-2026-112697: OpenAI Codex Security - Amy Burnett, \uc740\ud0dc \uc7a5\nWebKit Bugzilla: 324150\nCVE-2026-112655: Euntae Jang\nWebKit Bugzilla: 322120\nCVE-2026-112651: Euntae Jang\nWebKit Bugzilla: 323265\nCVE-2026-112623: pwn2addr, Lily Cohl (@GenericCoding)\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A race condition was addressed with improved locking.\nWebKit Bugzilla: 323986\nCVE-2026-112686: an anonymous researcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: This issue was addressed through improved state management.\nWebKit Bugzilla: 328132\nCVE-2026-112684: Gia Bui (@yabeow) from Calif.io\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A type confusion issue was addressed with improved state\nhandling.\nWebKit Bugzilla: 322033\nCVE-2026-112673: Myungyong Lee\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected Safari crash\nDescription: A race condition was addressed with improved state\nhandling.\nWebKit Bugzilla: 323173\nCVE-2026-112669: remanone (@remanone_)\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process termination\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 322671\nCVE-2026-112695: Josef Korbel (Citadelo), Luke Francis (@lukefr09)\nWebKit Bugzilla: 321669\nCVE-2026-112666: Luke Francis (@lukefr09)\nWebKit Bugzilla: 321934\nCVE-2026-112654: Charles Kern\nWebKit Bugzilla: 323227\nCVE-2026-112653: Malik M. (@m411k_)\nWebKit Bugzilla: 324735\nCVE-2026-112615: Chris Rohlf with Anthropic Research\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nWebKit Bugzilla: 321982\nCVE-2026-112659: OpenAI Codex Security - Amy Burnett, Chris Rohlf with\nAnthropic Research\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to memory\ncorruption\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 324262\nCVE-2026-112640: an anonymous researcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: A website may be able to use a media format that should be\nrestricted in Lockdown Mode\nDescription: A logic issue was addressed with improved checks.\nWebKit Bugzilla: 324004\nCVE-2026-113952: Drinor Selmanaj (Sentry)\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to memory\ncorruption\nDescription: A type confusion issue was addressed with improved state\nmanagement.\nWebKit Bugzilla: 323097\nCVE-2026-113949: an anonymous researcher\n\nWebKit\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to\nunexpected memory modification\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 321652\nCVE-2026-113903: Eddy Tsalolikhin, OpenAI Codex Security - Amy Burnett,\nLily Cohl (@GenericCoding)\n\nWebKit Canvas\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 323377\nCVE-2026-112637: Chris Rohlf with Anthropic Research, \uc740\ud0dc \uc7a5\n\nWebKit JavaScript Bindings\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 328141\nCVE-2026-112626: Euntae Jang, Luke Francis (@lukefr09), Shubham Chaskar,\nJosef Korbel (Citadelo)\n\nWebKit Process Model\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: A remote attacker may be able to break out of Web Content\nsandbox\nDescription: This issue was addressed by removing the vulnerable code.\nWebKit Bugzilla: 328129\nCVE-2026-113897: Luke Francis, Jackson Kuja\n\nWebKit Process Model\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to arbitrary\ncode execution\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 322743\nCVE-2026-112639: Luke Francis (@lukefr09)\n\nWebRTC\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nWebKit Bugzilla: 323096\nCVE-2026-113901: Kwak Kiyong (@Pwnkai23), Song Nuri\n\nWebRTC\nAvailable for: macOS Sequoia and macOS Tahoe\nImpact: Processing maliciously crafted web content may lead to an\nunexpected process crash\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nWebKit Bugzilla: 323079\nCVE-2026-86973: Narendra Singh (@_3P1C), an anonymous researcher\n\nAdditional recognition\n\nSafari\nWe would like to acknowledge Azza Tegar Naufal Ataullah, Exell Nakano,\nZhiyang Zeng (@Wester), satrya wira yudha for their assistance.\n\nService Workers\nWe would like to acknowledge Meta Red Team X - Nik Tsytsarkin for their\nassistance.\n\nWebKit\nWe would like to acknowledge Claudio Bozzato and Francesco Benvenuto of\nCisco Talos, Stan Shaw, Volodymyr Diachenko, Wael Alolowi, an anonymous\nresearcher for their assistance.\n\nWebKit Sandboxing\nWe would like to acknowledge Claudio Bozzato and Francesco Benvenuto of\nCisco Talos for their assistance.\n\nSafari 27.2 may be obtained from the Mac App Store.\n\nAll information is also posted on the Apple Security Releases\nweb site: https://support.apple.com/100100.\n\nThis message is signed with Apple\u0027s Product Security PGP key,\nand details are available at:\nhttps://www.apple.com/support/security/pgp/\n\n-----BEGIN PGP SIGNATURE-----\n\niQIzBAEBCAAdFiEEhjkl+zMLNwFiCT1o4Ifiq8DH7PUFAmrfvT8ACgkQ4Ifiq8DH\n7PXDFA/+JiE7IlJGXWwjUx9eCynW8wNj17bncAZH5uc1pF/Q2ERnHfzD+53oqxHS\nP8DVfaLHFYmlPwzV2saWnB9Jlv3sGzCt4X9qCNwM3koxOnXbJFXuzKi047e624hC\n+6ykLYII0DlogFli9TjrHCXRWMzLhb04erqFYfvr8HXpq3pEE4mH3TVLfhNbR0v3\nSPqSrnbsg81mlFMhhJ9D4C78OcRveZVv1/QHYJeHtLyB+OfW1UYM9/Lu0SvdCeEI\nHeLP1W2xTBpgpVfl4KK3+d9J/O7uao/1MR8EuvrM6J/sevK8k1d6IYnjhqEHTjNI\nf0/IcjCUWT3TNGjtgJT9lUbbXV8UXoOVMLHv8XubyZZxf0bYD1F2VusYJfUcLIbh\nyrNby3kEkj0jeiVIHmQgY+OxoKpVvReerHkZuZfALJ3ffsZFKuz4/cJVME6AiZ8k\nrx+bSRAaKa/29HSmU4m2WHyFjD8VySI5jI7oJ05my6yCitbz6QkKmqCNGhsCQzJC\nqEvjkq3T2oPmPY27Y7FfMDN7A/WTXE6XPHGtAAOWrChtQtFWJd21hPOn00DZjN63\n1C1LOeqa0QQrDOpa2QnDu9pMblo5CaJpGLxtVPHu0ibnwYiuHlOi6IFQZ6CfsajG\nGVhDV2NO3QJJ2VUJ6bQppNg+2YvlvATURMl96cFFAoYObIuAfgE=\n=epcU\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:30:00Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/47"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/47"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149527"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/47"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-10 Safari 27.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112599",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112615",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112623",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112639",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112651",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112653",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112654",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112655",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112659",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112666",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112669",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112673",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112680",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113901",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113903",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113904",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113949",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113952",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86973",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86974",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86985",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86986",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0462",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/47",
            "automated": true,
            "contentSha256": "f373270268f4702cf5d7d34d12cbcc4f5330e0a75d92c888faa74f564d009f0f",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/47",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:43:33Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0462"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:30:00Z",
    "dateUpdated": "2026-11-02T07:30:00Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0462"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0463

    Vulnerability from gna-1988 – Published: 2026-11-02 07:30 – Updated: 2026-11-02 07:30
    VLAI
    Title
    APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2 macOS Tahoe 26.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149522. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accelerate Framework Available for: macOS Tahoe Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86971: an anonymous researcher Accounts Available for: macOS Tahoe Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati AirPort Available for: macOS Tahoe Impact: An app may be able to read sensitive location information Description: An authorization issue was addressed with improved state management. CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus APFS Available for: macOS Tahoe Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo), Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan, Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract, Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong (@Pwnkai23), Song nuri APFS Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone APFS Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract App Store Available for: macOS Tahoe Impact: An app may be able to bypass network restrictions Description: This issue was addressed with improved checks. CVE-2026-112467: Sindre Sorhus App Store Available for: macOS Tahoe Impact: A remote attacker may be able to break out of the WebContent sandbox Description: This issue was addressed with improved input validation. CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos Apple Intelligence Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-86920: Johan Wahyudi Apple Neural Engine Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84595: tamdao Apple Neural Engine Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112696: Jaeyeong Lee AppleAVD Available for: macOS Tahoe Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc AppleAVD Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com) AppleAVD Available for: macOS Tahoe Impact: A malicious app may be able to break out of its sandbox Description: An information leakage was addressed with additional validation. CVE-2026-112704: Josh Maine of Calif.io AppleMobileFileIntegrity Available for: macOS Tahoe Impact: A malicious app may be able to read or write to protected files Description: A permissions issue was addressed with additional restrictions. CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos AppleRAID Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy) Archive Utility Available for: macOS Tahoe Impact: An attacker with root privileges may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc. ArchiveService Available for: macOS Tahoe Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved state management. CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent) ArchiveService Available for: macOS Tahoe Impact: Processing a maliciously crafted file may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks. CVE-2026-112568: an anonymous researcher Audio Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding) Audio Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112689: Franco Belman at Blackwing Intelligence AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) Bluetooth Available for: macOS Tahoe Impact: An attacker in physical proximity may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved validation. CVE-2026-112566: Chris Bailey - Short Circuit BOM Available for: macOS Tahoe Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Murray Mike BOM Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to heap corruption Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112670: Bhaswanth Chigurupati BOM Available for: macOS Tahoe Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: The issue was addressed with improved checks. CVE-2026-112672: 준우 이, Pasquale Scola Calendar Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Carbon Core Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-84528: zenith Carbon Core Available for: macOS Tahoe Impact: An app may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs CloudKit Available for: macOS Tahoe Impact: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions. CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs ColorSync Available for: macOS Tahoe Impact: Processing a maliciously crafted file may disclose process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112429: Mateusz Jurczyk of Google Project Zero Compression Available for: macOS Tahoe Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg configd Available for: macOS Tahoe Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Control Center Available for: macOS Tahoe Impact: A malicious application may be able to bypass Privacy preferences Description: A permissions issue was addressed with additional restrictions. CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57) copyfile Available for: macOS Tahoe Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved handling of symlinks. CVE-2026-86966: Jihwan Yoon Core Image Available for: macOS Tahoe Impact: Processing a maliciously crafted image may lead to unexpected process termination Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A race condition was addressed with improved locking. CVE-2026-112708: Nathaniel Oh (@calysteon) CoreAudio Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Tahoe Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io CoreAudio Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Tahoe Impact: An attacker in radio range ma
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Macos Tahoe Affected: unknown
    		Create a notification for this product.
    Credits
    Apple Product Security via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0463 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Tahoe",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2\n\nmacOS Tahoe 26.7.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149522.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAirPort\nAvailable for: macOS Tahoe\nImpact: An app may be able to read sensitive location information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: Mounting a maliciously crafted disk image may cause unexpected\nsystem termination or corrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84496: \uc900\uc6b0 \uc774, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo),\nMarco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan,\nNarendra Singh (@_3P1C), Thanatos Tian (HKPolyU) \u0026 wgg with Diffract,\nJakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong\n(@Pwnkai23), Song nuri\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan\nDautov, Peter Malone\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),\nKwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) \u0026 wgg with\nDiffract\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass network restrictions\nDescription: This issue was addressed with improved checks.\nCVE-2026-112467: Sindre Sorhus\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Intelligence\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86920: Johan Wahyudi\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84595: tamdao\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik\nTsytsarkin, Narendra Singh (@_3P1C), Hcamael and \u7ae0\u9c7c\u54e5@aipy\n(aipyaipy.com), Dohyeon An @PILAB Technology, Inc\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Rahul Raj, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-112704: Josh Maine of Calif.io\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to read or write to protected files\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nAppleRAID\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)\n\nArchive Utility\nAvailable for: macOS Tahoe\nImpact: An attacker with root privileges may be able to access protected\nuser data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps\nInc.\n\nArchiveService\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul\nMontgomery (@nullevent)\n\nArchiveService\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may bypass Gatekeeper\nchecks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-112568: an anonymous researcher\n\nAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy\nDuszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily\nCohl (@GenericCoding)\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: macOS Tahoe\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nBOM\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-84610: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs,\nMurray Mike\n\nBOM\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to heap\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112670: Bhaswanth Chigurupati\n\nBOM\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-112672: \uc900\uc6b0 \uc774, Pasquale Scola\n\nCalendar\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCarbon Core\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84528: zenith\n\nCarbon Core\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-86941: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCloudKit\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86896: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nColorSync\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may disclose process\nmemory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112429: Mateusz Jurczyk of Google Project Zero\n\nCompression\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nconfigd\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger\n\u0026 Ro Achterberg of Nosebeard Labs\n\nControl Center\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat\nSrisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,\nLakshay Sharma (MrW0r57)\n\ncopyfile\nAvailable for: macOS Tahoe\nImpact: An app may be able to modify protected parts of the file system\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-86966: Jihwan Yoon\n\nCore Image\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112471: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112708: Nathaniel Oh (@calysteon)\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-86969: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An attacker in radio range ma"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:30:00Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/48"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/48"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149522"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/48"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112410",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112415",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112421",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112423",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112424",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112428",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112429",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112430",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112434",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112437",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112438",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112441",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112442",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112443",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112444",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112447",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112449",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112451",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112453",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112456",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112457",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112461",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112462",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112467",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112471",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112473",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112475",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112478",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112479",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112480",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112481",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112482",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112483",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112484",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112487",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112488",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112492",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112493",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112494",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112502",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112504",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112508",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112510",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112511",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112512",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112519",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112521",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112522",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112523",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112524",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112525",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112526",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112529",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112530",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112531",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112532",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112533",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112534",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112535",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112537",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112539",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112540",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112541",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112543",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112548",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112550",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112551",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112552",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112553",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112555",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112556",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112557",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112558",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112562",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112568",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112569",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112570",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112575",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112593",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112604",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112614",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112622",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112625",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112629",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112647",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112652",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112660",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112668",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112670",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112672",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112675",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112676",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112677",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112682",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112689",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112705",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112708",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113899",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113900",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113913",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43736",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64750",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65327",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65363",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65368",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65373",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65397",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84496",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84528",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84539",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84590",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84595",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84604",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86916",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86920",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86923",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86929",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86931",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86936",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86937",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86939",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86941",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86942",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86945",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86946",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86954",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86958",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86964",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86966",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86971",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86972",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86984",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86990",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0463",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/48",
            "automated": true,
            "contentSha256": "8953149b22d4d1361092baf693a41370ebbb0e9372fca138550a4a5a6eda0995",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/48",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:45:02Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0463"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:30:00Z",
    "dateUpdated": "2026-11-02T07:30:00Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0463"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0461

    Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
    VLAI
    Title
    APPLE-SA-10-26-2026-9 visionOS 27.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-9 visionOS 27.2 visionOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149526. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accelerate Framework Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86971: an anonymous researcher Accounts Available for: Apple Vision Pro (all models) Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati Accounts Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112446: LiangWei, Sindre Sorhus App Intents Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112692: Huy Nguyen (@34306) of Calif.io App Store Available for: Apple Vision Pro (all models) Impact: A remote attacker may be able to break out of the WebContent sandbox Description: This issue was addressed with improved input validation. CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos Apple Neural Engine Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112696: Jaeyeong Lee Apple Neural Engine Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84494: Meta Red Team X - Nik Tsytsarkin AppleAVD Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology, Inc, Hcamael and 章鱼哥@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta Red Team X - Nik Tsytsarkin AppleAVD Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-112415: Hcamael and 章鱼哥@aipy (aipyaipy.com), Rahul Raj AppleAVD Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory Description: The issue was addressed with improved memory handling. CVE-2026-112454: @Licht_jb, Hcamael and 章鱼哥@aipy (aipyaipy.com) Audio Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx (@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding), Nathaniel Oh (@calysteon) AVEVideoEncoder Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) Bluetooth Available for: Apple Vision Pro (all models) Impact: An attacker in physical proximity may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved validation. CVE-2026-112566: Chris Bailey - Short Circuit Calendar Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Calendar Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted calendar invitation may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112619: Ivan Fratric of Google Project Zero ColorSync Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks. CVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X - - Nik Tsytsarkin Compression Available for: Apple Vision Pro (all models) Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg CoreAudio Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io CoreAudio Available for: Apple Vision Pro (all models) Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted audio file may lead to memory corruption Description: A buffer overflow was addressed with improved size validation. CVE-2026-86972: an anonymous researcher, Meta Product Security CoreAudio Available for: Apple Vision Pro (all models) Impact: An attacker in radio range may be able to cause unexpected system termination Description: A heap buffer overflow was addressed with improved bounds checking. CVE-2026-112638: Përparim Mjeku, Altin Gashi, Altin Gashi CoreGraphics Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-113950: Substrate, Stefan Esser (Calif) CoreMedia Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling. CVE-2026-86992: Niels Hofmans CoreMedia Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112706: Adriatik Raci, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Chris Bailey - Short Circuit CoreMedia Available for: Apple Vision Pro (all models) Impact: A malicious app may be able to access the camera without user permission Description: An access issue was addressed with improved access restrictions. CVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re) CoreText Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative FileProvider Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: A race condition was addressed with additional validation. CVE-2026-113896: R4mbb, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova Files Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: An access issue was addressed with improved access restrictions. CVE-2026-112618: Somair Ansar, Abodi Dawoud FontParser Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com) FontParser Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112683: Hcamael and 章鱼哥@aipy (aipyaipy.com) FontParser Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin FontParser Available for: Apple Vision Pro (all models) Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-112432: D4rthL Heimdal Available for: Apple Vision Pro (all models) Impact: An attacker in a privileged network position may be able to impersonate a Kerberos KDC Description: An issue with signature validation was addressed with improved checks. CVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from Talence Security HomeKit Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted video file may lead to unexpected system termination Description: An integer overflow was addressed with improved bounds checking. CVE-2026-112596: Garin R ImageIO Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-112571: sh3rlock (김보겸) ImageIO Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl) CVE-2026-112627: Mateusz Jurczyk of Google Project Zero ImageIO Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-112488: Mateusz Jurczyk of Google Project Zero, Nik Tsytsarkin, an anonymous researcher ImageIO Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112634: Mateusz Jurczyk of Google Project Zero CVE-2026-112629: Mateusz Jurczyk of Google Project Zero ImageIO Available for: Apple Vision Pro (all models) Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: An uninitialized memory issue was addressed with improved memory handling. CVE-2026-112632: Mateusz Jurczyk of Google Project Zero IOHIDFamily Available for: Apple Vision Pro (all mod
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Visionos Affected: unknown
    		Create a notification for this product.
    Credits
    Apple Product Security via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0461 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Visionos",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-9 visionOS 27.2\n\nvisionOS 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149526.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: Apple Vision Pro (all models)\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAccounts\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112446: LiangWei, Sindre Sorhus\n\nApp Intents\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112692: Huy Nguyen (@34306) of Calif.io\n\nApp Store\nAvailable for: Apple Vision Pro (all models)\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Neural Engine\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nApple Neural Engine\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84494: Meta Red Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology,\nInc, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta\nRed Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Rahul Raj\n\nAppleAVD\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-112454: @Licht_jb, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx\n(@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding),\nNathaniel Oh (@calysteon)\n\nAVEVideoEncoder\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nCalendar\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCalendar\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted calendar invitation may lead to\nmemory corruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112619: Ivan Fratric of Google Project Zero\n\nColorSync\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved checks.\nCVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X\n- - Nik Tsytsarkin\n\nCompression\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted audio file may lead to memory\ncorruption\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-86972: an anonymous researcher, Meta Product Security\n\nCoreAudio\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker in radio range may be able to cause unexpected\nsystem termination\nDescription: A heap buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112638: P\u00ebrparim Mjeku, Altin Gashi, Altin Gashi\n\nCoreGraphics\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted font may lead to unexpected app\ntermination or corrupt process memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-113950: Substrate, Stefan Esser (Calif)\n\nCoreMedia\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-86992: Niels Hofmans\n\nCoreMedia\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112706: Adriatik Raci, Rodolphe BRUNETTI (@eisw0lf) of Lupus\nNova, Chris Bailey - Short Circuit\n\nCoreMedia\nAvailable for: Apple Vision Pro (all models)\nImpact: A malicious app may be able to access the camera without user\npermission\nDescription: An access issue was addressed with improved access\nrestrictions.\nCVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re)\n\nCoreText\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day\nInitiative\n\nFileProvider\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: A race condition was addressed with additional validation.\nCVE-2026-113896: R4mbb, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova\n\nFiles\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: An access issue was addressed with improved access\nrestrictions.\nCVE-2026-112618: Somair Ansar, Abodi Dawoud\n\nFontParser\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-86970: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nFontParser\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted font may lead to unexpected app\ntermination or corrupt process memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112683: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nFontParser\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112642: Meta Red Team X - Nik Tsytsarkin\n\nFontParser\nAvailable for: Apple Vision Pro (all models)\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-112432: D4rthL\n\nHeimdal\nAvailable for: Apple Vision Pro (all models)\nImpact: An attacker in a privileged network position may be able to\nimpersonate a Kerberos KDC\nDescription: An issue with signature validation was addressed with\nimproved checks.\nCVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from\nTalence Security\n\nHomeKit\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted video file may lead to\nunexpected system termination\nDescription: An integer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112596: Garin R\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-112571: sh3rlock (\uae40\ubcf4\uacb8)\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112561: Meta Red Team X - Nik Tsytsarkin\nCVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)\nCVE-2026-112627: Mateusz Jurczyk of Google Project Zero\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may corrupt process\nmemory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-112488: Mateusz Jurczyk of Google Project Zero, Nik Tsytsarkin,\nan anonymous researcher\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112634: Mateusz Jurczyk of Google Project Zero\nCVE-2026-112629: Mateusz Jurczyk of Google Project Zero\n\nImageIO\nAvailable for: Apple Vision Pro (all models)\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: An uninitialized memory issue was addressed with improved\nmemory handling.\nCVE-2026-112632: Mateusz Jurczyk of Google Project Zero\n\nIOHIDFamily\nAvailable for: Apple Vision Pro (all mod"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:59Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/46"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/46"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149526"
        },
        {
          "url": "https://support.apple.com/kb/HT214009"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/46"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-9 visionOS 27.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2022-26704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112415",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112417",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112423",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112432",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112446",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112449",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112454",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112461",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112474",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112488",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112500",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112518",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112596",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112599",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112615",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112616",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112618",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112619",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112620",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112623",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112629",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112639",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112646",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112651",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112652",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112653",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112654",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112655",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112659",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112660",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112673",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112676",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112679",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112680",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112682",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112685",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112706",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113901",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113903",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113904",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113909",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113913",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113949",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113950",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65385",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65397",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84494",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86925",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86968",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86971",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86972",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86974",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86986",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86988",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86990",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0461",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/46",
            "automated": true,
            "contentSha256": "a8ee70fdc98861e9ac81be27dc1b634a092e1acc07d6585ba2e28611d7c4d463",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/46",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:43:14Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0461"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:59Z",
    "dateUpdated": "2026-11-02T07:29:59Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0461"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0460

    Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
    VLAI
    Title
    APPLE-SA-10-26-2026-8 watchOS 27.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-8 watchOS 27.2 watchOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149525. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accounts Available for: Apple Watch Series 9 and later Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati Accounts Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112446: LiangWei, Sindre Sorhus App Intents Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112692: Huy Nguyen (@34306) of Calif.io AppleAVD Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory Description: The issue was addressed with improved memory handling. CVE-2026-112454: @Licht_jb, Hcamael and 章鱼哥@aipy (aipyaipy.com) Audio Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx (@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding), Nathaniel Oh (@calysteon) AVEVideoEncoder Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) Bluetooth Available for: Apple Watch Series 9 and later Impact: An attacker in physical proximity may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved validation. CVE-2026-112566: Chris Bailey - Short Circuit Calendar Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Calendar Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted calendar invitation may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112619: Ivan Fratric of Google Project Zero ColorSync Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks. CVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X - - Nik Tsytsarkin Compression Available for: Apple Watch Series 9 and later Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg CoreAudio Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted audio file may lead to memory corruption Description: A buffer overflow was addressed with improved size validation. CVE-2026-86972: an anonymous researcher, Meta Product Security CoreAudio Available for: Apple Watch Series 9 and later Impact: An attacker in radio range may be able to cause unexpected system termination Description: A heap buffer overflow was addressed with improved bounds checking. CVE-2026-112638: Përparim Mjeku, Altin Gashi, Altin Gashi CoreGraphics Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-113950: Substrate, Stefan Esser (Calif) CoreMedia Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling. CVE-2026-86992: Niels Hofmans CoreMedia Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112706: Adriatik Raci, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Chris Bailey - Short Circuit CoreText Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative FontParser Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com) FontParser Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-112432: D4rthL Heimdal Available for: Apple Watch Series 9 and later Impact: An attacker in a privileged network position may be able to impersonate a Kerberos KDC Description: An issue with signature validation was addressed with improved checks. CVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from Talence Security HomeKit Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted video file may lead to unexpected system termination Description: An integer overflow was addressed with improved bounds checking. CVE-2026-112596: Garin R ImageIO Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-112571: sh3rlock (김보겸) ImageIO Available for: Apple Watch Series 9 and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl) IOHIDFamily Available for: Apple Watch Series 9 and later Impact: An attacker may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112515: Charles Stevenson, Seung Je Seong, Mathis Mansière IOKit Available for: Apple Watch Series 9 and later Impact: A buffer overflow may result in memory corruption and unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-65385: Meta Red Team X - Nik Tsytsarkin IOMobileFrameBuffer Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A race condition was addressed with improved state handling. CVE-2026-112459: Lily Cohl (@GenericCoding), an anonymous researcher IOSurface Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A race condition was addressed with improved locking. CVE-2026-112477: an anonymous researcher Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected changes to copy-on-write memory Description: A memory integrity issue was addressed with improved handling of copy-on-write pages. CVE-2026-112576: Pedro Pinho Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-112606: Wang Yu Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-65350: Nebula Security (@nebusecurity), Tim Michaud (@TimGMichaud) of Aginor.ai, Xinru Chi of Pangu Lab CVE-2026-112679: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd. Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A use after free issue was addressed with improved memory management. CVE-2026-112517: Pasquale Scola, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, Cem Onat Karagun, an anonymous researcher Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: A use-after-free issue was addressed with improved memory management. CVE-2026-112516: greenbynox, an anonymous researcher Kernel Available for: Apple Watch Series 9 and later Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination or write kernel memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-84495: Wang Yu CVE-2026-112474: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd. Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: A race condition was addressed with improved state handling. CVE-2026-112501: Cem Onat Karagun Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo Kernel Available for: Apple Watch Series 9 and later Impact: An app may be able to determine kernel memory layout Description: An information disclosure issue was addressed with improved state management. CVE-2026-112665: Will Estes MediaAnalysis Available for: Apple Watch Series 9 and later Impact: An app may be able to access sensitive user data Description: A race condition was addressed with additional validation. CVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Zhongquan Li (@Guluisacat), Ilya Andr (andrd3v) of Positive Technologies Messages Available for: Apple Watch Series 9 and later Impact: A remote attacker may be able to cause unexpected app termination Description: An input validation issue was addressed with improve
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Watchos Affected: unknown
    		Create a notification for this product.
    Credits
    Apple Product Security via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0460 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Watchos",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-8 watchOS 27.2\n\nwatchOS 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149525.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts\nAvailable for: Apple Watch Series 9 and later\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAccounts\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112446: LiangWei, Sindre Sorhus\n\nApp Intents\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112692: Huy Nguyen (@34306) of Calif.io\n\nAppleAVD\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-112454: @Licht_jb, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAudio\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx\n(@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding),\nNathaniel Oh (@calysteon)\n\nAVEVideoEncoder\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: Apple Watch Series 9 and later\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nCalendar\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCalendar\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted calendar invitation may lead to\nmemory corruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112619: Ivan Fratric of Google Project Zero\n\nColorSync\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved checks.\nCVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X\n- - Nik Tsytsarkin\n\nCompression\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nCoreAudio\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted audio file may lead to memory\ncorruption\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-86972: an anonymous researcher, Meta Product Security\n\nCoreAudio\nAvailable for: Apple Watch Series 9 and later\nImpact: An attacker in radio range may be able to cause unexpected\nsystem termination\nDescription: A heap buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112638: P\u00ebrparim Mjeku, Altin Gashi, Altin Gashi\n\nCoreGraphics\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted font may lead to unexpected app\ntermination or corrupt process memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-113950: Substrate, Stefan Esser (Calif)\n\nCoreMedia\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-86992: Niels Hofmans\n\nCoreMedia\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112706: Adriatik Raci, Rodolphe BRUNETTI (@eisw0lf) of Lupus\nNova, Chris Bailey - Short Circuit\n\nCoreText\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day\nInitiative\n\nFontParser\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-86970: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nFontParser\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-112432: D4rthL\n\nHeimdal\nAvailable for: Apple Watch Series 9 and later\nImpact: An attacker in a privileged network position may be able to\nimpersonate a Kerberos KDC\nDescription: An issue with signature validation was addressed with\nimproved checks.\nCVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from\nTalence Security\n\nHomeKit\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected system termination\nDescription: An integer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112596: Garin R\n\nImageIO\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-112571: sh3rlock (\uae40\ubcf4\uacb8)\n\nImageIO\nAvailable for: Apple Watch Series 9 and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112561: Meta Red Team X - Nik Tsytsarkin\nCVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)\n\nIOHIDFamily\nAvailable for: Apple Watch Series 9 and later\nImpact: An attacker may be able to cause unexpected system termination\nor read kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112515: Charles Stevenson, Seung Je Seong, Mathis Mansi\u00e8re\n\nIOKit\nAvailable for: Apple Watch Series 9 and later\nImpact: A buffer overflow may result in memory corruption and unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-65385: Meta Red Team X - Nik Tsytsarkin\n\nIOMobileFrameBuffer\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-112459: Lily Cohl (@GenericCoding), an anonymous researcher\n\nIOSurface\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112477: an anonymous researcher\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected changes to copy-on-write\nmemory\nDescription: A memory integrity issue was addressed with improved\nhandling of copy-on-write pages.\nCVE-2026-112576: Pedro Pinho\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-112606: Wang Yu\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-65350: Nebula Security (@nebusecurity), Tim Michaud\n(@TimGMichaud) of Aginor.ai, Xinru Chi of Pangu Lab\nCVE-2026-112679: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112517: Pasquale Scola, Wout van der Ploeg\n(woutvanderploeg.nl), John Lussier, Cem Onat Karagun, an anonymous\nresearcher\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-112516: greenbynox, an anonymous researcher\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An attacker may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan\nZhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-84495: Wang Yu\nCVE-2026-112474: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-112501: Cem Onat Karagun\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112476: Arnold Cartagena, Matt Suiche (@msuiche) of Tolmo\n\nKernel\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to determine kernel memory layout\nDescription: An information disclosure issue was addressed with improved\nstate management.\nCVE-2026-112665: Will Estes\n\nMediaAnalysis\nAvailable for: Apple Watch Series 9 and later\nImpact: An app may be able to access sensitive user data\nDescription: A race condition was addressed with additional validation.\nCVE-2026-113915: Abodi Dawoud, Rodolphe BRUNETTI (@eisw0lf) of Lupus\nNova, Zhongquan Li (@Guluisacat), Ilya Andr (andrd3v) of Positive\nTechnologies\n\nMessages\nAvailable for: Apple Watch Series 9 and later\nImpact: A remote attacker may be able to cause unexpected app\ntermination\nDescription: An input validation issue was addressed with improve"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:59Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/45"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/45"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149525"
        },
        {
          "url": "https://support.apple.com/kb/HT204641"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/45"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-8 watchOS 27.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2022-26704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112432",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112446",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112454",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112459",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112474",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112518",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112596",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112599",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112615",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112619",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112655",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112666",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112669",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112679",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112682",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112685",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112706",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113904",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113950",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65385",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86972",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86988",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0460",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/45",
            "automated": true,
            "contentSha256": "ea5bb15a965348d7412d1f6d990f085beea0e5a29038aa2ca247850628ffbe50",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/45",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:42:52Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0460"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:59Z",
    "dateUpdated": "2026-11-02T07:29:59Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0460"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0459

    Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
    VLAI
    Title
    APPLE-SA-10-26-2026-7 tvOS 27.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-7 tvOS 27.2 tvOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149524. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accounts Available for: Apple TV 4K 2nd generation and later Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati Accounts Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112446: LiangWei, Sindre Sorhus App Intents Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112692: Huy Nguyen (@34306) of Calif.io AppleAVD Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology, Inc, Hcamael and 章鱼哥@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta Red Team X - Nik Tsytsarkin AppleAVD Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory Description: The issue was addressed with improved memory handling. CVE-2026-112454: @Licht_jb, Hcamael and 章鱼哥@aipy (aipyaipy.com) Audio Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx (@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding), Nathaniel Oh (@calysteon) AVEVideoEncoder Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io AVEVideoEncoder Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112689: Franco Belman at Blackwing Intelligence AVEVideoEncoder Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) Bluetooth Available for: Apple TV 4K 2nd generation and later Impact: An attacker in physical proximity may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved validation. CVE-2026-112566: Chris Bailey - Short Circuit ColorSync Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks. CVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X - - Nik Tsytsarkin Compression Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg CoreAudio Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io CoreAudio Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted audio file may lead to memory corruption Description: A buffer overflow was addressed with improved size validation. CVE-2026-86972: an anonymous researcher, Meta Product Security CoreAudio Available for: Apple TV 4K 2nd generation and later Impact: An attacker in radio range may be able to cause unexpected system termination Description: A heap buffer overflow was addressed with improved bounds checking. CVE-2026-112638: Përparim Mjeku, Altin Gashi, Altin Gashi CoreGraphics Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-113950: Substrate, Stefan Esser (Calif) CoreMedia Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling. CVE-2026-86992: Niels Hofmans CoreMedia Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112706: Adriatik Raci, Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Chris Bailey - Short Circuit CoreText Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative FontParser Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-86970: Hcamael and 章鱼哥@aipy (aipyaipy.com) FontParser Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112642: Meta Red Team X - Nik Tsytsarkin FontParser Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-112432: D4rthL Heimdal Available for: Apple TV 4K 2nd generation and later Impact: An attacker in a privileged network position may be able to impersonate a Kerberos KDC Description: An issue with signature validation was addressed with improved checks. CVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from Talence Security HomeKit Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved checks. CVE-2026-86978: Garin R HomeKit Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted video file may lead to unexpected system termination Description: An integer overflow was addressed with improved bounds checking. CVE-2026-112596: Garin R ImageIO Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-112571: sh3rlock (김보겸) ImageIO Available for: Apple TV 4K 2nd generation and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112561: Meta Red Team X - Nik Tsytsarkin CVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl) IOHIDFamily Available for: Apple TV 4K 2nd generation and later Impact: An attacker may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112515: Charles Stevenson, Seung Je Seong, Mathis Mansière IOMobileFrameBuffer Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A race condition was addressed with improved state handling. CVE-2026-112459: Lily Cohl (@GenericCoding), an anonymous researcher IOSurface Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A race condition was addressed with improved locking. CVE-2026-112477: an anonymous researcher Kernel Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected changes to copy-on-write memory Description: A memory integrity issue was addressed with improved handling of copy-on-write pages. CVE-2026-112576: Pedro Pinho Kernel Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination Description: A type confusion issue was addressed with improved memory handling. CVE-2026-112606: Wang Yu Kernel Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-65350: Nebula Security (@nebusecurity), Tim Michaud (@TimGMichaud) of Aginor.ai, Xinru Chi of Pangu Lab CVE-2026-112679: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd. Kernel Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: A use after free issue was addressed with improved memory management. CVE-2026-112517: Pasquale Scola, Wout van der Ploeg (woutvanderploeg.nl), John Lussier, Cem Onat Karagun, an anonymous researcher Kernel Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination Description: A use-after-free issue was addressed with improved memory management. CVE-2026-112516: greenbynox, an anonymous researcher Kernel Available for: Apple TV 4K 2nd generation and later Impact: An attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox Kernel Available for: Apple TV 4K 2nd generation and later Impact: An app may be able to cause unexpected system termination or write kernel memory Description: A use-after-free issue was addressed with improved memory management. CVE-2026-84495: Wang Yu CVE-
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Tvos Affected: unknown
    		Create a notification for this product.
    Credits
    Apple Product Security via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0459 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Tvos",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-7 tvOS 27.2\n\ntvOS 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149524.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccounts\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAccounts\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112446: LiangWei, Sindre Sorhus\n\nApp Intents\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112692: Huy Nguyen (@34306) of Calif.io\n\nAppleAVD\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology,\nInc, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta\nRed Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-112454: @Licht_jb, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAudio\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx\n(@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding),\nNathaniel Oh (@calysteon)\n\nAVEVideoEncoder\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nColorSync\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved checks.\nCVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X\n- - Nik Tsytsarkin\n\nCompression\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nCoreAudio\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted audio file may lead to memory\ncorruption\nDescription: A buffer overflow was addressed with improved size\nvalidation.\nCVE-2026-86972: an anonymous researcher, Meta Product Security\n\nCoreAudio\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An attacker in radio range may be able to cause unexpected\nsystem termination\nDescription: A heap buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112638: P\u00ebrparim Mjeku, Altin Gashi, Altin Gashi\n\nCoreGraphics\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted font may lead to unexpected app\ntermination or corrupt process memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-113950: Substrate, Stefan Esser (Calif)\n\nCoreMedia\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-86992: Niels Hofmans\n\nCoreMedia\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112706: Adriatik Raci, Rodolphe BRUNETTI (@eisw0lf) of Lupus\nNova, Chris Bailey - Short Circuit\n\nCoreText\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112656: Nurihan Kim (HanTul) working with TrendAI Zero Day\nInitiative\n\nFontParser\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-86970: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nFontParser\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted font may result in the\ndisclosure of process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112642: Meta Red Team X - Nik Tsytsarkin\n\nFontParser\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-112432: D4rthL\n\nHeimdal\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An attacker in a privileged network position may be able to\nimpersonate a Kerberos KDC\nDescription: An issue with signature validation was addressed with\nimproved checks.\nCVE-2026-112518: Roman Zabicki, Tristan Madani (@TristanInSec) from\nTalence Security\n\nHomeKit\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with improved checks.\nCVE-2026-86978: Garin R\n\nHomeKit\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected system termination\nDescription: An integer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112596: Garin R\n\nImageIO\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-112571: sh3rlock (\uae40\ubcf4\uacb8)\n\nImageIO\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112561: Meta Red Team X - Nik Tsytsarkin\nCVE-2026-112560: Wout van der Ploeg (woutvanderploeg.nl)\n\nIOHIDFamily\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An attacker may be able to cause unexpected system termination\nor read kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112515: Charles Stevenson, Seung Je Seong, Mathis Mansi\u00e8re\n\nIOMobileFrameBuffer\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A race condition was addressed with improved state\nhandling.\nCVE-2026-112459: Lily Cohl (@GenericCoding), an anonymous researcher\n\nIOSurface\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112477: an anonymous researcher\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected changes to copy-on-write\nmemory\nDescription: A memory integrity issue was addressed with improved\nhandling of copy-on-write pages.\nCVE-2026-112576: Pedro Pinho\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination\nDescription: A type confusion issue was addressed with improved memory\nhandling.\nCVE-2026-112606: Wang Yu\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-65350: Nebula Security (@nebusecurity), Tim Michaud\n(@TimGMichaud) of Aginor.ai, Xinru Chi of Pangu Lab\nCVE-2026-112679: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927)\nof STAR Labs SG Pte. Ltd.\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112517: Pasquale Scola, Wout van der Ploeg\n(woutvanderploeg.nl), John Lussier, Cem Onat Karagun, an anonymous\nresearcher\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-112516: greenbynox, an anonymous researcher\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An attacker may be able to cause unexpected system termination\nor corrupt kernel memory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-112514: Marc Newlin of SkySafe, Billy Jheng Bing Jhong and Pan\nZhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., greenbynox\n\nKernel\nAvailable for: Apple TV 4K 2nd generation and later\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: A use-after-free issue was addressed with improved memory\nmanagement.\nCVE-2026-84495: Wang Yu\nCVE-"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:59Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/44"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/44"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149524"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/44"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-7 tvOS 27.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112432",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112446",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112454",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112459",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112474",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112518",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112595",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112596",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112599",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112615",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112620",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112655",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112666",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112669",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112679",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112685",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112687",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112689",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112705",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112706",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113904",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113950",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86972",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86978",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86985",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86988",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0459",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/44",
            "automated": true,
            "contentSha256": "b68a88861e2b9a48b2b595baaac95d298ed73a6213ba4ec14a54d5c798544cd8",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/44",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:42:13Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0459"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:59Z",
    "dateUpdated": "2026-11-02T07:29:59Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0459"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0457

    Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
    VLAI
    Title
    APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2 macOS Tahoe 26.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149522. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accelerate Framework Available for: macOS Tahoe Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86971: an anonymous researcher Accounts Available for: macOS Tahoe Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati AirPort Available for: macOS Tahoe Impact: An app may be able to read sensitive location information Description: An authorization issue was addressed with improved state management. CVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus APFS Available for: macOS Tahoe Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84496: 준우 이, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo), Marco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan, Narendra Singh (@_3P1C), Thanatos Tian (HKPolyU) & wgg with Diffract, Jakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong (@Pwnkai23), Song nuri APFS Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone APFS Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract App Store Available for: macOS Tahoe Impact: An app may be able to bypass network restrictions Description: This issue was addressed with improved checks. CVE-2026-112467: Sindre Sorhus App Store Available for: macOS Tahoe Impact: A remote attacker may be able to break out of the WebContent sandbox Description: This issue was addressed with improved input validation. CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos Apple Intelligence Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-86920: Johan Wahyudi Apple Neural Engine Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84595: tamdao Apple Neural Engine Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112696: Jaeyeong Lee AppleAVD Available for: macOS Tahoe Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc AppleAVD Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com) AppleAVD Available for: macOS Tahoe Impact: A malicious app may be able to break out of its sandbox Description: An information leakage was addressed with additional validation. CVE-2026-112704: Josh Maine of Calif.io AppleMobileFileIntegrity Available for: macOS Tahoe Impact: A malicious app may be able to read or write to protected files Description: A permissions issue was addressed with additional restrictions. CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos AppleRAID Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy) Archive Utility Available for: macOS Tahoe Impact: An attacker with root privileges may be able to access protected user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps Inc. ArchiveService Available for: macOS Tahoe Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved state management. CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent) ArchiveService Available for: macOS Tahoe Impact: Processing a maliciously crafted file may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks. CVE-2026-112568: an anonymous researcher Audio Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding) Audio Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112689: Franco Belman at Blackwing Intelligence AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) Bluetooth Available for: macOS Tahoe Impact: An attacker in physical proximity may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved validation. CVE-2026-112566: Chris Bailey - Short Circuit BOM Available for: macOS Tahoe Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-84610: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Murray Mike BOM Available for: macOS Tahoe Impact: Processing a maliciously crafted file may lead to heap corruption Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112670: Bhaswanth Chigurupati BOM Available for: macOS Tahoe Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: The issue was addressed with improved checks. CVE-2026-112672: 준우 이, Pasquale Scola Calendar Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Carbon Core Available for: macOS Tahoe Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-84528: zenith Carbon Core Available for: macOS Tahoe Impact: An app may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs CloudKit Available for: macOS Tahoe Impact: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions. CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs ColorSync Available for: macOS Tahoe Impact: Processing a maliciously crafted file may disclose process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112429: Mateusz Jurczyk of Google Project Zero Compression Available for: macOS Tahoe Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg configd Available for: macOS Tahoe Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Control Center Available for: macOS Tahoe Impact: A malicious application may be able to bypass Privacy preferences Description: A permissions issue was addressed with additional restrictions. CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57) copyfile Available for: macOS Tahoe Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved handling of symlinks. CVE-2026-86966: Jihwan Yoon Core Image Available for: macOS Tahoe Impact: Processing a maliciously crafted image may lead to unexpected process termination Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A race condition was addressed with improved locking. CVE-2026-112708: Nathaniel Oh (@calysteon) CoreAudio Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Tahoe Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io CoreAudio Available for: macOS Tahoe Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Tahoe Impact: An attacker in radio range ma
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Macos Tahoe Affected: unknown
    		Create a notification for this product.
    Credits
    KC Chambers via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0457 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Tahoe",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "KC Chambers via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2\n\nmacOS Tahoe 26.7.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149522.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAirPort\nAvailable for: macOS Tahoe\nImpact: An app may be able to read sensitive location information\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-112551: Nguyen Duc Anh of Noventiq, Sindre Sorhus\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: Mounting a maliciously crafted disk image may cause unexpected\nsystem termination or corrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84496: \uc900\uc6b0 \uc774, Maher Azzouzi, Jonathan Bar Or (@yo_yo_yo_jbo),\nMarco Schmitt, Nathaniel Oh (@calysteon), Aswin Kumar Gokulakannan,\nNarendra Singh (@_3P1C), Thanatos Tian (HKPolyU) \u0026 wgg with Diffract,\nJakob Pammer, an anonymous researcher, Bhuwan Bhetwal, Kwak kiyong\n(@Pwnkai23), Song nuri\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan\nDautov, Peter Malone\n\nAPFS\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),\nKwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) \u0026 wgg with\nDiffract\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: An app may be able to bypass network restrictions\nDescription: This issue was addressed with improved checks.\nCVE-2026-112467: Sindre Sorhus\n\nApp Store\nAvailable for: macOS Tahoe\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Intelligence\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86920: Johan Wahyudi\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84595: tamdao\n\nApple Neural Engine\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik\nTsytsarkin, Narendra Singh (@_3P1C), Hcamael and \u7ae0\u9c7c\u54e5@aipy\n(aipyaipy.com), Dohyeon An @PILAB Technology, Inc\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Rahul Raj, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAppleAVD\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-112704: Josh Maine of Calif.io\n\nAppleMobileFileIntegrity\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to read or write to protected files\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nAppleRAID\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)\n\nArchive Utility\nAvailable for: macOS Tahoe\nImpact: An attacker with root privileges may be able to access protected\nuser data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86939: Lance Cain - Senior Security Researcher at SpecterOps\nInc.\n\nArchiveService\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul\nMontgomery (@nullevent)\n\nArchiveService\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may bypass Gatekeeper\nchecks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-112568: an anonymous researcher\n\nAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy\nDuszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily\nCohl (@GenericCoding)\n\nAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: macOS Tahoe\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\n\nBOM\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-84610: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs,\nMurray Mike\n\nBOM\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may lead to heap\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112670: Bhaswanth Chigurupati\n\nBOM\nAvailable for: macOS Tahoe\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-112672: \uc900\uc6b0 \uc774, Pasquale Scola\n\nCalendar\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCarbon Core\nAvailable for: macOS Tahoe\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84528: zenith\n\nCarbon Core\nAvailable for: macOS Tahoe\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-86941: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCloudKit\nAvailable for: macOS Tahoe\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86896: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nColorSync\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted file may disclose process\nmemory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112429: Mateusz Jurczyk of Google Project Zero\n\nCompression\nAvailable for: macOS Tahoe\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nconfigd\nAvailable for: macOS Tahoe\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger\n\u0026 Ro Achterberg of Nosebeard Labs\n\nControl Center\nAvailable for: macOS Tahoe\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat\nSrisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,\nLakshay Sharma (MrW0r57)\n\ncopyfile\nAvailable for: macOS Tahoe\nImpact: An app may be able to modify protected parts of the file system\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-86966: Jihwan Yoon\n\nCore Image\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112471: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112708: Nathaniel Oh (@calysteon)\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-86969: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Tahoe\nImpact: An attacker in radio range ma"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:58Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/36"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/36"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149522"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/36"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-5 macOS Tahoe 26.7.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112410",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112415",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112421",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112423",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112424",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112428",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112429",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112430",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112434",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112437",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112438",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112441",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112442",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112443",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112444",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112447",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112449",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112451",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112453",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112456",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112457",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112461",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112462",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112467",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112471",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112473",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112475",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112478",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112479",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112480",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112481",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112482",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112483",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112484",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112487",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112488",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112492",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112493",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112494",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112502",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112504",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112508",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112510",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112511",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112512",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112519",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112521",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112522",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112523",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112524",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112525",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112526",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112529",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112530",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112531",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112532",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112533",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112534",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112535",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112537",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112539",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112540",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112541",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112543",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112548",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112550",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112551",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112552",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112553",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112555",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112556",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112557",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112558",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112562",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112568",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112569",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112570",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112575",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112593",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112604",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112614",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112622",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112625",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112629",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112647",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112652",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112660",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112668",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112670",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112672",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112675",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112676",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112677",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112682",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112689",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112705",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112708",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113899",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113900",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113913",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-43736",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64750",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65327",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65363",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65368",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65373",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65397",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84496",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84528",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84539",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84590",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84595",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84604",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86916",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86920",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86923",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86929",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86931",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86936",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86937",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86939",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86941",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86942",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86945",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86946",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86954",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86958",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86964",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86966",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86971",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86972",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86984",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86990",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0457",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/36",
            "automated": true,
            "contentSha256": "4789450e2570646973a8a6ff0172f847a0e0d73711b19292ca5604a471a9b7a9",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/36",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:41:40Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0457"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:58Z",
    "dateUpdated": "2026-11-02T07:29:58Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0457"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0458

    Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
    VLAI
    Title
    APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2 macOS Sequoia 15.8.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149523. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accelerate Available for: macOS Sequoia Impact: An app may be able to cause a denial-of-service Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-28991: Seiji Sakurai (@HeapSmasher) Accelerate Framework Available for: macOS Sequoia Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86971: an anonymous researcher Accounts Available for: macOS Sequoia Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati afpfs Available for: macOS Sequoia Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-64767: Dave G. APFS Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan Dautov, Peter Malone APFS Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C), Kwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) & wgg with Diffract App Store Available for: macOS Sequoia Impact: A remote attacker may be able to break out of the WebContent sandbox Description: This issue was addressed with improved input validation. CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos Apple Intelligence Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-86920: Johan Wahyudi Apple Neural Engine Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84595: tamdao Apple Neural Engine Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112696: Jaeyeong Lee AppleAVD Available for: macOS Sequoia Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik Tsytsarkin, Narendra Singh (@_3P1C), Hcamael and 章鱼哥@aipy (aipyaipy.com), Dohyeon An @PILAB Technology, Inc AppleAVD Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-112415: Rahul Raj, Hcamael and 章鱼哥@aipy (aipyaipy.com) AppleAVD Available for: macOS Sequoia Impact: A malicious app may be able to break out of its sandbox Description: An information leakage was addressed with additional validation. CVE-2026-112704: Josh Maine of Calif.io AppleMobileFileIntegrity Available for: macOS Sequoia Impact: A malicious app may be able to read or write to protected files Description: A permissions issue was addressed with additional restrictions. CVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos AppleRAID Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. CVE-2026-112531: Chanwit Muenprakoddee (ChemIndy) ArchiveService Available for: macOS Sequoia Impact: An app may bypass Gatekeeper checks Description: A logic issue was addressed with improved state management. CVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul Montgomery (@nullevent) ArchiveService Available for: macOS Sequoia Impact: Processing a maliciously crafted file may bypass Gatekeeper checks Description: A logic issue was addressed with improved checks. CVE-2026-112568: an anonymous researcher Audio Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy Duszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily Cohl (@GenericCoding) Audio Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112689: Franco Belman at Blackwing Intelligence AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) BOM Available for: macOS Sequoia Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs BOM Available for: macOS Sequoia Impact: Processing a maliciously crafted file may lead to heap corruption Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112670: Bhaswanth Chigurupati BOM Available for: macOS Sequoia Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks Description: The issue was addressed with improved checks. CVE-2026-112672: 준우 이, Pasquale Scola Calendar Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Carbon Core Available for: macOS Sequoia Impact: An app may be able to access sensitive user data Description: A logging issue was addressed with improved data redaction. CVE-2026-84528: zenith Carbon Core Available for: macOS Sequoia Impact: An app may bypass Gatekeeper checks Description: A file quarantine bypass was addressed with additional checks. CVE-2026-86941: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs CloudKit Available for: macOS Sequoia Impact: A malicious app may be able to gain root privileges Description: A permissions issue was addressed with additional restrictions. CVE-2026-86896: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs ColorSync Available for: macOS Sequoia Impact: Processing a maliciously crafted file may disclose process memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112429: Mateusz Jurczyk of Google Project Zero Compression Available for: macOS Sequoia Impact: An app may be able to disclose kernel memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2026-113910: Tucker Willenborg configd Available for: macOS Sequoia Impact: An app may be able to gain root privileges Description: A parsing issue in the handling of directory paths was addressed with improved path validation. CVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs Control Center Available for: macOS Sequoia Impact: A malicious application may be able to bypass Privacy preferences Description: A permissions issue was addressed with additional restrictions. CVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat Srisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee, Lakshay Sharma (MrW0r57) copyfile Available for: macOS Sequoia Impact: An app may be able to modify protected parts of the file system Description: This issue was addressed with improved handling of symlinks. CVE-2026-86966: Jihwan Yoon Core Image Available for: macOS Sequoia Impact: Processing a maliciously crafted image may lead to unexpected process termination Description: A buffer overflow was addressed with improved bounds checking. CVE-2026-112471: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A race condition was addressed with improved locking. CVE-2026-112708: Nathaniel Oh (@calysteon) CoreAudio Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-86969: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Sequoia Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory Description: An out-of-bounds access issue was addressed with improved bounds checking. CVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io CoreAudio Available for: macOS Sequoia Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: A buffer overflow issue was addressed with improved memory handling. CVE-2026-113907: Meta Red Team X - Nik Tsytsarkin CoreAudio Available for: macOS Sequoia Impact: An attacker in radio range may be able to cause unexpected system termination Description: A heap buffer overflow was addressed with improved bounds checking. CVE-2026-112638: Altin Gashi, Përparim Mjeku, Altin Gashi CoreGraphics Available for: macOS Sequoia Impact: Processing a maliciously crafted PDF file may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112610: Meta Red Team X - Nik Tsytsarkin CVE-2026-112611: f4&Zhiniang Peng with HUST, Aobo Wang (@M4x_1997), Xiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr Jerzy Duszynski, an anonymous researcher CoreMedia Available for: macOS Sequoia Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: The issue was addressed with improved memory handling. CVE-2026-86992: Niels Hofmans CoreMedia Available for: macOS Sequoia Impact: Parsing a file may lead to an unexpected app
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Macos Sequoia Affected: unknown
    		Create a notification for this product.
    Credits
    Apple Product Security via Fulldisclosure
    Relationships
    reference GCVE-1988-2026-0458 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Macos Sequoia",
          "vendor": "Apple",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2\n\nmacOS Sequoia 15.8.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149523.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause a denial-of-service\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-28991: Seiji Sakurai (@HeapSmasher)\n\nAccelerate Framework\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccounts\nAvailable for: macOS Sequoia\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nafpfs\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to cause unexpected system\ntermination or corrupt kernel memory\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-64767: Dave G.\n\nAPFS\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112525: We Muftihaturrahmah, Aswin Kumar Gokula Kannan, Ruslan\nDautov, Peter Malone\n\nAPFS\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112536: Ruslan Dautov, Thomas Guillem, Narendra Singh (@_3P1C),\nKwak Kiyong (@Pwnkai23), Song Nuri, Thanatos Tian (HKPolyU) \u0026 wgg with\nDiffract\n\nApp Store\nAvailable for: macOS Sequoia\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Intelligence\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-86920: Johan Wahyudi\n\nApple Neural Engine\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84595: tamdao\n\nApple Neural Engine\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Meta Red Team X - Nik\nTsytsarkin, Narendra Singh (@_3P1C), Hcamael and \u7ae0\u9c7c\u54e5@aipy\n(aipyaipy.com), Dohyeon An @PILAB Technology, Inc\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Rahul Raj, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAppleAVD\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to break out of its sandbox\nDescription: An information leakage was addressed with additional\nvalidation.\nCVE-2026-112704: Josh Maine of Calif.io\n\nAppleMobileFileIntegrity\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to read or write to protected files\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112539: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nAppleRAID\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: A use after free issue was addressed with improved memory\nmanagement.\nCVE-2026-112531: Chanwit Muenprakoddee (ChemIndy)\n\nArchiveService\nAvailable for: macOS Sequoia\nImpact: An app may bypass Gatekeeper checks\nDescription: A logic issue was addressed with improved state management.\nCVE-2026-86937: YingMuo (@YingMuo) of DEVCORE Research Team, Paul\nMontgomery (@nullevent)\n\nArchiveService\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may bypass Gatekeeper\nchecks\nDescription: A logic issue was addressed with improved checks.\nCVE-2026-112568: an anonymous researcher\n\nAudio\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Nathaniel Oh (@calysteon), Piotr Jerzy\nDuszynski, an anonymous researcher, Surej Sekhar, r3pwnx (@r3pwnx), Lily\nCohl (@GenericCoding)\n\nAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112675: Lakshay Sharma (MrW0r57), Abodi Dawoud\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBOM\nAvailable for: macOS Sequoia\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-84610: Murray Mike, Andreas Jaegersberger \u0026 Ro Achterberg of\nNosebeard Labs\n\nBOM\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may lead to heap\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112670: Bhaswanth Chigurupati\n\nBOM\nAvailable for: macOS Sequoia\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\nDescription: The issue was addressed with improved checks.\nCVE-2026-112672: \uc900\uc6b0 \uc774, Pasquale Scola\n\nCalendar\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCarbon Core\nAvailable for: macOS Sequoia\nImpact: An app may be able to access sensitive user data\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-84528: zenith\n\nCarbon Core\nAvailable for: macOS Sequoia\nImpact: An app may bypass Gatekeeper checks\nDescription: A file quarantine bypass was addressed with additional\nchecks.\nCVE-2026-86941: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nCloudKit\nAvailable for: macOS Sequoia\nImpact: A malicious app may be able to gain root privileges\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-86896: Andreas Jaegersberger \u0026 Ro Achterberg of Nosebeard Labs\n\nColorSync\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted file may disclose process\nmemory\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112429: Mateusz Jurczyk of Google Project Zero\n\nCompression\nAvailable for: macOS Sequoia\nImpact: An app may be able to disclose kernel memory\nDescription: A memory initialization issue was addressed with improved\nmemory handling.\nCVE-2026-113910: Tucker Willenborg\n\nconfigd\nAvailable for: macOS Sequoia\nImpact: An app may be able to gain root privileges\nDescription: A parsing issue in the handling of directory paths was\naddressed with improved path validation.\nCVE-2026-112545: Frederick Kaludis (Coiffeur0x90), Andreas Jaegersberger\n\u0026 Ro Achterberg of Nosebeard Labs\n\nControl Center\nAvailable for: macOS Sequoia\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112462: DEVADATH V L, Junyeong Lee (jylab.github.io), Weeraphat\nSrisutham, Yejun Kim, an anonymous researcher, Zwei Tasse Kaffee,\nLakshay Sharma (MrW0r57)\n\ncopyfile\nAvailable for: macOS Sequoia\nImpact: An app may be able to modify protected parts of the file system\nDescription: This issue was addressed with improved handling of\nsymlinks.\nCVE-2026-86966: Jihwan Yoon\n\nCore Image\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted image may lead to unexpected\nprocess termination\nDescription: A buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112471: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A race condition was addressed with improved locking.\nCVE-2026-112708: Nathaniel Oh (@calysteon)\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-86969: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted media file may lead to\nunexpected app termination or corrupt process memory\nDescription: An out-of-bounds access issue was addressed with improved\nbounds checking.\nCVE-2026-113912: an anonymous researcher, \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Roman\nZabicki, Anna Groza (@pwnlambda) of Calif.io\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: A buffer overflow issue was addressed with improved memory\nhandling.\nCVE-2026-113907: Meta Red Team X - Nik Tsytsarkin\n\nCoreAudio\nAvailable for: macOS Sequoia\nImpact: An attacker in radio range may be able to cause unexpected\nsystem termination\nDescription: A heap buffer overflow was addressed with improved bounds\nchecking.\nCVE-2026-112638: Altin Gashi, P\u00ebrparim Mjeku, Altin Gashi\n\nCoreGraphics\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted PDF file may lead to memory\ncorruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112610: Meta Red Team X - Nik Tsytsarkin\nCVE-2026-112611: f4\u0026Zhiniang Peng with HUST, Aobo Wang (@M4x_1997),\nXiang Chen, Jakob Pammer, Anna Groza (@pwnlambda) of Calif.io, Piotr\nJerzy Duszynski, an anonymous researcher\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-86992: Niels Hofmans\n\nCoreMedia\nAvailable for: macOS Sequoia\nImpact: Parsing a file may lead to an unexpected app"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:58Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/43"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/43"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149523"
        },
        {
          "url": "https://support.apple.com/downloads/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/43"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-6 macOS Sequoia 15.8.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-112410",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112415",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112421",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112423",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112424",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112428",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112429",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112430",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112434",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112437",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112438",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112441",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112442",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112447",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112449",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112451",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112453",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112456",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112457",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112461",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112462",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112471",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112473",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112475",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112479",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112480",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112481",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112482",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112483",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112484",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112487",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112492",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112493",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112497",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112502",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112504",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112505",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112508",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112510",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112511",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112512",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112519",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112521",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112522",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112523",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112524",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112525",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112526",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112529",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112530",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112531",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112532",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112533",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112534",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112535",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112536",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112537",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112539",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112540",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112541",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112543",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112548",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112550",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112552",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112553",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112555",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112556",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112557",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112558",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112560",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112562",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112563",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112568",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112569",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112570",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112575",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112593",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112601",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112625",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112629",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112647",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112652",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112660",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112668",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112670",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112672",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112675",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112676",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112677",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112689",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112705",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112708",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113899",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113900",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113913",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20648",
              "type": "related"
            },
            {
              "destId": "CVE-2026-20649",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28864",
              "type": "related"
            },
            {
              "destId": "CVE-2026-28991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64750",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64767",
              "type": "related"
            },
            {
              "destId": "CVE-2026-64789",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65327",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65363",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65368",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65373",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65392",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65397",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84498",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84528",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84542",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84545",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84590",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84595",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84604",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86920",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86923",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86929",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86931",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86936",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86937",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86941",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86942",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86945",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86946",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86954",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86958",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86966",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86971",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86984",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0458",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/43",
            "automated": true,
            "contentSha256": "ff2ea9fe255fa5beba44a8150b2fbf204aa52a22024eaa1ddc129527b824fe75",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/43",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:41:59Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0458"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:58Z",
    "dateUpdated": "2026-11-02T07:29:58Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0458"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-112605 (GCVE-0-2026-112605)

    Vulnerability from nvd – Published: 2026-10-30 00:26 – Updated: 2026-10-30 00:26
    VLAI
    Summary
    This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to read arbitrary files
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Xcode Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Xcode",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read arbitrary files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T00:26:44.082Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149589"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-112605",
    "datePublished": "2026-10-30T00:26:44.082Z",
    "dateReserved": "2026-10-19T17:05:22.984Z",
    "dateUpdated": "2026-10-30T00:26:44.082Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-112602 (GCVE-0-2026-112602)

    Vulnerability from nvd – Published: 2026-10-30 00:26 – Updated: 2026-10-30 00:26
    VLAI
    Summary
    An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to access sensitive user data
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Xcode Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Xcode",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T00:26:43.253Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149589"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-112602",
    "datePublished": "2026-10-30T00:26:43.253Z",
    "dateReserved": "2026-10-19T17:05:22.983Z",
    "dateUpdated": "2026-10-30T00:26:43.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-113957 (GCVE-0-2026-113957)

    Vulnerability from nvd – Published: 2026-10-29 00:01 – Updated: 2026-10-29 00:01
    VLAI
    Summary
    An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1.
    Severity
    No CVSS data available.
    CWE
    • An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned.
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple container Affected: 0 , < 1.6.0 (custom)
    		Create a notification for this product.
    Apple containerization Affected: 0 , < 0.52.1 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "container",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "1.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "containerization",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "0.52.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-29T00:01:44.984Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://github.com/apple/containerization/security/advisories/GHSA-vgrw-36j7-r93w"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-113957",
    "datePublished": "2026-10-29T00:01:44.984Z",
    "dateReserved": "2026-10-20T21:06:55.480Z",
    "dateUpdated": "2026-10-29T00:01:44.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86983 (GCVE-0-2026-86983)

    Vulnerability from nvd – Published: 2026-10-28 23:01 – Updated: 2026-10-28 23:02
    VLAI
    Summary
    A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.
    Severity
    No CVSS data available.
    CWE
    • A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length.
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple swift-crypto Affected: 0 , < 5.0.3 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "swift-crypto",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "5.0.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-28T23:02:44.171Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://github.com/apple/swift-crypto/security/advisories/GHSA-jwv7-rv4f-rff2"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86983",
    "datePublished": "2026-10-28T23:01:59.598Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-28T23:02:44.171Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86992 (GCVE-0-2026-86992)

    Vulnerability from nvd – Published: 2026-10-26 20:34 – Updated: 2026-10-26 20:34
    VLAI
    Summary
    The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination.
    Severity
    No CVSS data available.
    CWE
    • Processing a maliciously crafted video file may lead to unexpected app termination
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 15.8.2 (custom)
    Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple tvOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple watchOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted video file may lead to unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:34:22.804Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149522"
        },
        {
          "url": "https://support.apple.com/en-us/149523"
        },
        {
          "url": "https://support.apple.com/en-us/149524"
        },
        {
          "url": "https://support.apple.com/en-us/149525"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86992",
    "datePublished": "2026-10-26T20:34:22.804Z",
    "dateReserved": "2026-09-08T16:43:47.664Z",
    "dateUpdated": "2026-10-26T20:34:22.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86991 (GCVE-0-2026-86991)

    Vulnerability from nvd – Published: 2026-10-26 20:43 – Updated: 2026-10-26 20:43
    VLAI
    Summary
    A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination.
    Severity
    No CVSS data available.
    CWE
    • Processing a maliciously crafted file may lead to unexpected process termination
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 15.8.2 (custom)
    Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to unexpected process termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:43:44.001Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149522"
        },
        {
          "url": "https://support.apple.com/en-us/149523"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86991",
    "datePublished": "2026-10-26T20:43:44.001Z",
    "dateReserved": "2026-09-08T16:43:47.664Z",
    "dateUpdated": "2026-10-26T20:43:44.001Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86990 (GCVE-0-2026-86990)

    Vulnerability from nvd – Published: 2026-10-26 20:42 – Updated: 2026-10-26 20:42
    VLAI
    Summary
    An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user permission.
    Severity
    No CVSS data available.
    CWE
    • A malicious app may be able to access the camera without user permission
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 18.7.11 (custom)
    Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user permission."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious app may be able to access the camera without user permission",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:42:28.304Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149225"
        },
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149522"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86990",
    "datePublished": "2026-10-26T20:42:28.304Z",
    "dateReserved": "2026-09-08T16:43:47.664Z",
    "dateUpdated": "2026-10-26T20:42:28.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86989 (GCVE-0-2026-86989)

    Vulnerability from nvd – Published: 2026-10-26 20:35 – Updated: 2026-10-26 20:35
    VLAI
    Summary
    An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to fingerprint the user
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to fingerprint the user",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:35:23.977Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86989",
    "datePublished": "2026-10-26T20:35:23.977Z",
    "dateReserved": "2026-09-08T16:43:47.664Z",
    "dateUpdated": "2026-10-26T20:35:23.977Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86988 (GCVE-0-2026-86988)

    Vulnerability from nvd – Published: 2026-10-26 20:33 – Updated: 2026-11-02 19:44
    VLAI
    Summary
    The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory.
    Severity
    4.3 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-11-02 19:44 UTC
    CWE
    • Processing a maliciously crafted image may result in disclosure of process memory
    • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple tvOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple watchOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86988",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-02T19:44:28.020289Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-02T19:44:32.320Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted image may result in disclosure of process memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:33:43.496Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149524"
        },
        {
          "url": "https://support.apple.com/en-us/149525"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86988",
    "datePublished": "2026-10-26T20:33:43.496Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-11-02T19:44:32.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86987 (GCVE-0-2026-86987)

    Vulnerability from nvd – Published: 2026-10-26 20:43 – Updated: 2026-10-29 13:17
    VLAI
    Summary
    An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data.
    Severity
    5.5 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-29 13:07 UTC
    CWE
    • A remote attacker may be able to access sensitive user data
    • CWE-862 - Missing Authorization
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-86987",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-29T13:07:53.992664Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-862",
                "description": "CWE-862 Missing Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-29T13:17:16.467Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:43:36.993Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149230"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86987",
    "datePublished": "2026-10-26T20:43:36.993Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-29T13:17:16.467Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86986 (GCVE-0-2026-86986)

    Vulnerability from nvd – Published: 2026-10-26 20:42 – Updated: 2026-10-26 20:42
    VLAI
    Summary
    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash.
    Severity
    No CVSS data available.
    CWE
    • Processing maliciously crafted web content may lead to an unexpected Safari crash
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Safari Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected Safari crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:42:35.426Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        },
        {
          "url": "https://support.apple.com/en-us/149527"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86986",
    "datePublished": "2026-10-26T20:42:35.426Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-26T20:42:35.426Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86985 (GCVE-0-2026-86985)

    Vulnerability from nvd – Published: 2026-10-26 20:34 – Updated: 2026-10-26 20:34
    VLAI
    Summary
    This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
    Severity
    No CVSS data available.
    CWE
    • Processing maliciously crafted web content may lead to an unexpected process crash
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Safari Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple tvOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:34:41.891Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149524"
        },
        {
          "url": "https://support.apple.com/en-us/149527"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86985",
    "datePublished": "2026-10-26T20:34:41.891Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-26T20:34:41.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86984 (GCVE-0-2026-86984)

    Vulnerability from nvd – Published: 2026-10-26 20:34 – Updated: 2026-10-26 20:34
    VLAI
    Summary
    A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access information about a user's contacts.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to access information about a user's contacts
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple macOS Affected: 0 , < 15.8.2 (custom)
    Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access information about a user\u0027s contacts."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access information about a user\u0027s contacts",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:34:13.376Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149522"
        },
        {
          "url": "https://support.apple.com/en-us/149523"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86984",
    "datePublished": "2026-10-26T20:34:13.376Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-26T20:34:13.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86978 (GCVE-0-2026-86978)

    Vulnerability from nvd – Published: 2026-10-26 20:41 – Updated: 2026-10-26 20:41
    VLAI
    Summary
    This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to access sensitive user data
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple tvOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:41:34.313Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149524"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86978",
    "datePublished": "2026-10-26T20:41:34.313Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-26T20:41:34.313Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86974 (GCVE-0-2026-86974)

    Vulnerability from nvd – Published: 2026-10-26 20:40 – Updated: 2026-10-26 20:40
    VLAI
    Summary
    A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption.
    Severity
    No CVSS data available.
    CWE
    • Processing maliciously crafted web content may lead to memory corruption
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Safari Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:40:47.225Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        },
        {
          "url": "https://support.apple.com/en-us/149527"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86974",
    "datePublished": "2026-10-26T20:40:47.225Z",
    "dateReserved": "2026-09-08T16:43:47.662Z",
    "dateUpdated": "2026-10-26T20:40:47.225Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86973 (GCVE-0-2026-86973)

    Vulnerability from nvd – Published: 2026-10-26 20:41 – Updated: 2026-10-26 20:41
    VLAI
    Summary
    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. Processing maliciously crafted web content may lead to an unexpected process crash.
    Severity
    No CVSS data available.
    CWE
    • Processing maliciously crafted web content may lead to an unexpected process crash
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Safari Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. Processing maliciously crafted web content may lead to an unexpected process crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to an unexpected process crash",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:41:47.396Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149527"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86973",
    "datePublished": "2026-10-26T20:41:47.396Z",
    "dateReserved": "2026-09-08T16:43:47.662Z",
    "dateUpdated": "2026-10-26T20:41:47.396Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86972 (GCVE-0-2026-86972)

    Vulnerability from nvd – Published: 2026-10-26 20:44 – Updated: 2026-10-26 20:44
    VLAI
    Summary
    A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption.
    Severity
    No CVSS data available.
    CWE
    • Processing a maliciously crafted audio file may lead to memory corruption
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple iOS and iPadOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple macOS Affected: 0 , < 26.7.2 (custom)
    Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple tvOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple visionOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Apple watchOS Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted audio file may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-26T20:44:31.556Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149227"
        },
        {
          "url": "https://support.apple.com/en-us/149230"
        },
        {
          "url": "https://support.apple.com/en-us/149521"
        },
        {
          "url": "https://support.apple.com/en-us/149522"
        },
        {
          "url": "https://support.apple.com/en-us/149524"
        },
        {
          "url": "https://support.apple.com/en-us/149525"
        },
        {
          "url": "https://support.apple.com/en-us/149526"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86972",
    "datePublished": "2026-10-26T20:44:31.556Z",
    "dateReserved": "2026-09-08T16:43:47.662Z",
    "dateUpdated": "2026-10-26T20:44:31.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-112605 (GCVE-0-2026-112605)

    Vulnerability from cvelistv5 – Published: 2026-10-30 00:26 – Updated: 2026-10-30 00:26
    VLAI
    Summary
    This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to read arbitrary files
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Xcode Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Xcode",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2. An app may be able to read arbitrary files."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to read arbitrary files",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T00:26:44.082Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149589"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-112605",
    "datePublished": "2026-10-30T00:26:44.082Z",
    "dateReserved": "2026-10-19T17:05:22.984Z",
    "dateUpdated": "2026-10-30T00:26:44.082Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-112602 (GCVE-0-2026-112602)

    Vulnerability from cvelistv5 – Published: 2026-10-30 00:26 – Updated: 2026-10-30 00:26
    VLAI
    Summary
    An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data.
    Severity
    No CVSS data available.
    CWE
    • An app may be able to access sensitive user data
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple Xcode Affected: 0 , < 27.2 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Xcode",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authorization issue was addressed with improved state management. This issue is fixed in Xcode 27.2. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-30T00:26:43.253Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149589"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-112602",
    "datePublished": "2026-10-30T00:26:43.253Z",
    "dateReserved": "2026-10-19T17:05:22.983Z",
    "dateUpdated": "2026-10-30T00:26:43.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-113957 (GCVE-0-2026-113957)

    Vulnerability from cvelistv5 – Published: 2026-10-29 00:01 – Updated: 2026-10-29 00:01
    VLAI
    Summary
    An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1.
    Severity
    No CVSS data available.
    CWE
    • An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned.
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple container Affected: 0 , < 1.6.0 (custom)
    		Create a notification for this product.
    Apple containerization Affected: 0 , < 0.52.1 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "container",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "1.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "containerization",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "0.52.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-29T00:01:44.984Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://github.com/apple/containerization/security/advisories/GHSA-vgrw-36j7-r93w"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-113957",
    "datePublished": "2026-10-29T00:01:44.984Z",
    "dateReserved": "2026-10-20T21:06:55.480Z",
    "dateUpdated": "2026-10-29T00:01:44.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-86983 (GCVE-0-2026-86983)

    Vulnerability from cvelistv5 – Published: 2026-10-28 23:01 – Updated: 2026-10-28 23:02
    VLAI
    Summary
    A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3.
    Severity
    No CVSS data available.
    CWE
    • A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length.
    Assigner
    apple CNA under the mitre root
    CNA scorecard E 37/100 over 992 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Apple swift-crypto Affected: 0 , < 5.0.3 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "swift-crypto",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "5.0.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-28T23:02:44.171Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://github.com/apple/swift-crypto/security/advisories/GHSA-jwv7-rv4f-rff2"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-86983",
    "datePublished": "2026-10-28T23:01:59.598Z",
    "dateReserved": "2026-09-08T16:43:47.663Z",
    "dateUpdated": "2026-10-28T23:02:44.171Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CERTFR-2026-AVI-1387

    Vulnerability from certfr_avis - Published: 2026-10-27 - Updated: 2026-10-27

    De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.

    Apple indique que la vulnérabilité CVE-2026-86950 est activement exploitée.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    Apple visionOS visionOS versions antérieures à 27.2
    Apple macOS macOS Golden Gate versions antérieures à 27.2
    Apple iPadOS iPadOS versions antérieures à 26.7.2
    Apple iPadOS iPadOS versions antérieures à 27.2
    Apple macOS macOS Tahoe versions antérieures à 26.7.2
    Apple iPadOS iPadOS versions antérieures à 18.7.11
    Apple macOS macOS Sequoia versions antérieures à 15.8.2
    Apple Safari Safari versions antérieures à 27.2
    Apple iOS iOS versions antérieures à 18.7.11
    Apple iOS iOS versions antérieures à 27.2
    Apple watchOS watchOS versions antérieures à 27.2
    Apple tvOS tvOS versions antérieures à 27.2
    Apple iOS iOS versions antérieures à 26.7.2
    References
    Bulletin de sécurité Apple 149524 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149521 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149225 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149227 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149525 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149527 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149230 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149526 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149523 2026-10-26 vendor-advisory
    Bulletin de sécurité Apple 149522 2026-10-26 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "visionOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Golden Gate versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 26.7.2",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.7.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 18.7.11",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.8.2",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 18.7.11",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "watchOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 27.2",
      "product": {
        "name": "tvOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 26.7.2",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-112483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112483"
    },
    {
      "name": "CVE-2026-112566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112566"
    },
    {
      "name": "CVE-2026-84539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84539"
    },
    {
      "name": "CVE-2026-112669",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112669"
    },
    {
      "name": "CVE-2026-112453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112453"
    },
    {
      "name": "CVE-2026-112695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112695"
    },
    {
      "name": "CVE-2026-84498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84498"
    },
    {
      "name": "CVE-2026-86920",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86920"
    },
    {
      "name": "CVE-2026-86986",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86986"
    },
    {
      "name": "CVE-2026-112486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112486"
    },
    {
      "name": "CVE-2026-86958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86958"
    },
    {
      "name": "CVE-2019-5598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-5598"
    },
    {
      "name": "CVE-2026-112651",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112651"
    },
    {
      "name": "CVE-2026-113948",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113948"
    },
    {
      "name": "CVE-2026-112515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112515"
    },
    {
      "name": "CVE-2026-112425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112425"
    },
    {
      "name": "CVE-2026-113937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113937"
    },
    {
      "name": "CVE-2026-112659",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112659"
    },
    {
      "name": "CVE-2026-84495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84495"
    },
    {
      "name": "CVE-2026-112704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112704"
    },
    {
      "name": "CVE-2026-113897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113897"
    },
    {
      "name": "CVE-2026-65384",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65384"
    },
    {
      "name": "CVE-2026-86896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86896"
    },
    {
      "name": "CVE-2026-112551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112551"
    },
    {
      "name": "CVE-2026-112606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112606"
    },
    {
      "name": "CVE-2026-112563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112563"
    },
    {
      "name": "CVE-2026-112612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112612"
    },
    {
      "name": "CVE-2026-113907",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113907"
    },
    {
      "name": "CVE-2026-113914",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113914"
    },
    {
      "name": "CVE-2026-112523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112523"
    },
    {
      "name": "CVE-2026-84627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84627"
    },
    {
      "name": "CVE-2026-112474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112474"
    },
    {
      "name": "CVE-2026-112513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112513"
    },
    {
      "name": "CVE-2026-112417",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112417"
    },
    {
      "name": "CVE-2026-112614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112614"
    },
    {
      "name": "CVE-2026-112658",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112658"
    },
    {
      "name": "CVE-2026-112571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112571"
    },
    {
      "name": "CVE-2026-112647",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112647"
    },
    {
      "name": "CVE-2026-112434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112434"
    },
    {
      "name": "CVE-2026-113912",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113912"
    },
    {
      "name": "CVE-2026-112654",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112654"
    },
    {
      "name": "CVE-2026-112478",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112478"
    },
    {
      "name": "CVE-2026-86985",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86985"
    },
    {
      "name": "CVE-2026-112529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112529"
    },
    {
      "name": "CVE-2026-112430",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112430"
    },
    {
      "name": "CVE-2026-112507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112507"
    },
    {
      "name": "CVE-2026-112707",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112707"
    },
    {
      "name": "CVE-2026-112652",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112652"
    },
    {
      "name": "CVE-2026-84496",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84496"
    },
    {
      "name": "CVE-2026-112696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112696"
    },
    {
      "name": "CVE-2026-112446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112446"
    },
    {
      "name": "CVE-2026-113945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113945"
    },
    {
      "name": "CVE-2026-112599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112599"
    },
    {
      "name": "CVE-2026-112482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112482"
    },
    {
      "name": "CVE-2026-112487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112487"
    },
    {
      "name": "CVE-2026-112495",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112495"
    },
    {
      "name": "CVE-2026-65385",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65385"
    },
    {
      "name": "CVE-2026-86978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86978"
    },
    {
      "name": "CVE-2026-112625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112625"
    },
    {
      "name": "CVE-2026-112689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112689"
    },
    {
      "name": "CVE-2026-65392",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65392"
    },
    {
      "name": "CVE-2026-112556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112556"
    },
    {
      "name": "CVE-2026-112502",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112502"
    },
    {
      "name": "CVE-2026-112455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112455"
    },
    {
      "name": "CVE-2026-112484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112484"
    },
    {
      "name": "CVE-2026-113950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113950"
    },
    {
      "name": "CVE-2026-112678",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112678"
    },
    {
      "name": "CVE-2026-112708",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112708"
    },
    {
      "name": "CVE-2026-112559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112559"
    },
    {
      "name": "CVE-2026-112701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112701"
    },
    {
      "name": "CVE-2026-86991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86991"
    },
    {
      "name": "CVE-2026-112473",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112473"
    },
    {
      "name": "CVE-2026-112616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112616"
    },
    {
      "name": "CVE-2026-112485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112485"
    },
    {
      "name": "CVE-2026-84528",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84528"
    },
    {
      "name": "CVE-2026-113939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113939"
    },
    {
      "name": "CVE-2026-113944",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113944"
    },
    {
      "name": "CVE-2026-86945",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86945"
    },
    {
      "name": "CVE-2026-112560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112560"
    },
    {
      "name": "CVE-2026-112568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112568"
    },
    {
      "name": "CVE-2026-84599",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84599"
    },
    {
      "name": "CVE-2026-112620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112620"
    },
    {
      "name": "CVE-2026-112543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112543"
    },
    {
      "name": "CVE-2026-84545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84545"
    },
    {
      "name": "CVE-2026-112525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112525"
    },
    {
      "name": "CVE-2026-86990",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86990"
    },
    {
      "name": "CVE-2026-112532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112532"
    },
    {
      "name": "CVE-2026-113947",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113947"
    },
    {
      "name": "CVE-2026-112705",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112705"
    },
    {
      "name": "CVE-2026-112428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112428"
    },
    {
      "name": "CVE-2026-112533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112533"
    },
    {
      "name": "CVE-2026-43736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43736"
    },
    {
      "name": "CVE-2026-112653",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112653"
    },
    {
      "name": "CVE-2026-86988",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86988"
    },
    {
      "name": "CVE-2026-86989",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86989"
    },
    {
      "name": "CVE-2026-112462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112462"
    },
    {
      "name": "CVE-2026-112492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112492"
    },
    {
      "name": "CVE-2026-113943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113943"
    },
    {
      "name": "CVE-2026-112626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112626"
    },
    {
      "name": "CVE-2026-86941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86941"
    },
    {
      "name": "CVE-2026-112413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112413"
    },
    {
      "name": "CVE-2026-86880",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86880"
    },
    {
      "name": "CVE-2026-112514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112514"
    },
    {
      "name": "CVE-2026-112640",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112640"
    },
    {
      "name": "CVE-2026-112511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112511"
    },
    {
      "name": "CVE-2026-112685",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112685"
    },
    {
      "name": "CVE-2026-113898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113898"
    },
    {
      "name": "CVE-2026-112618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112618"
    },
    {
      "name": "CVE-2026-86987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86987"
    },
    {
      "name": "CVE-2026-86931",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86931"
    },
    {
      "name": "CVE-2026-112577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112577"
    },
    {
      "name": "CVE-2026-112481",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112481"
    },
    {
      "name": "CVE-2026-113908",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113908"
    },
    {
      "name": "CVE-2026-112622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112622"
    },
    {
      "name": "CVE-2026-112542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112542"
    },
    {
      "name": "CVE-2026-112561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112561"
    },
    {
      "name": "CVE-2026-112666",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112666"
    },
    {
      "name": "CVE-2026-65339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65339"
    },
    {
      "name": "CVE-2026-112698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112698"
    },
    {
      "name": "CVE-2026-86969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86969"
    },
    {
      "name": "CVE-2026-112416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112416"
    },
    {
      "name": "CVE-2026-113946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113946"
    },
    {
      "name": "CVE-2026-112593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112593"
    },
    {
      "name": "CVE-2026-112677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112677"
    },
    {
      "name": "CVE-2026-86916",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86916"
    },
    {
      "name": "CVE-2026-112660",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112660"
    },
    {
      "name": "CVE-2026-86937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86937"
    },
    {
      "name": "CVE-2026-112646",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112646"
    },
    {
      "name": "CVE-2026-112504",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112504"
    },
    {
      "name": "CVE-2026-86992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86992"
    },
    {
      "name": "CVE-2026-86923",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86923"
    },
    {
      "name": "CVE-2026-84494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84494"
    },
    {
      "name": "CVE-2026-112683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112683"
    },
    {
      "name": "CVE-2026-112447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112447"
    },
    {
      "name": "CVE-2026-113896",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113896"
    },
    {
      "name": "CVE-2026-112558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112558"
    },
    {
      "name": "CVE-2026-112535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112535"
    },
    {
      "name": "CVE-2026-84595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84595"
    },
    {
      "name": "CVE-2026-112410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112410"
    },
    {
      "name": "CVE-2026-112630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112630"
    },
    {
      "name": "CVE-2026-112449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112449"
    },
    {
      "name": "CVE-2026-112601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112601"
    },
    {
      "name": "CVE-2026-112639",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112639"
    },
    {
      "name": "CVE-2026-112456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112456"
    },
    {
      "name": "CVE-2026-112672",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112672"
    },
    {
      "name": "CVE-2026-86943",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86943"
    },
    {
      "name": "CVE-2026-112611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112611"
    },
    {
      "name": "CVE-2026-65363",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65363"
    },
    {
      "name": "CVE-2026-64759",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64759"
    },
    {
      "name": "CVE-2026-112692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112692"
    },
    {
      "name": "CVE-2026-112627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112627"
    },
    {
      "name": "CVE-2026-84604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84604"
    },
    {
      "name": "CVE-2026-112607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112607"
    },
    {
      "name": "CVE-2026-86966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86966"
    },
    {
      "name": "CVE-2026-84594",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84594"
    },
    {
      "name": "CVE-2026-112575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112575"
    },
    {
      "name": "CVE-2026-112498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112498"
    },
    {
      "name": "CVE-2026-112623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112623"
    },
    {
      "name": "CVE-2026-65373",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65373"
    },
    {
      "name": "CVE-2026-112500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112500"
    },
    {
      "name": "CVE-2026-112475",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112475"
    },
    {
      "name": "CVE-2026-112457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112457"
    },
    {
      "name": "CVE-2026-113915",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113915"
    },
    {
      "name": "CVE-2026-112687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112687"
    },
    {
      "name": "CVE-2026-113910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113910"
    },
    {
      "name": "CVE-2026-112537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112537"
    },
    {
      "name": "CVE-2026-112466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112466"
    },
    {
      "name": "CVE-2026-112497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112497"
    },
    {
      "name": "CVE-2026-112570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112570"
    },
    {
      "name": "CVE-2026-112609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112609"
    },
    {
      "name": "CVE-2026-112671",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112671"
    },
    {
      "name": "CVE-2026-84605",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84605"
    },
    {
      "name": "CVE-2026-84610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84610"
    },
    {
      "name": "CVE-2026-112682",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112682"
    },
    {
      "name": "CVE-2026-112553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112553"
    },
    {
      "name": "CVE-2026-86936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86936"
    },
    {
      "name": "CVE-2026-112615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112615"
    },
    {
      "name": "CVE-2026-86968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86968"
    },
    {
      "name": "CVE-2026-112501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112501"
    },
    {
      "name": "CVE-2026-113904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113904"
    },
    {
      "name": "CVE-2026-86925",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86925"
    },
    {
      "name": "CVE-2026-112443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112443"
    },
    {
      "name": "CVE-2026-112634",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112634"
    },
    {
      "name": "CVE-2026-112539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112539"
    },
    {
      "name": "CVE-2026-113942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113942"
    },
    {
      "name": "CVE-2026-112544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112544"
    },
    {
      "name": "CVE-2026-86939",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86939"
    },
    {
      "name": "CVE-2026-112679",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112679"
    },
    {
      "name": "CVE-2026-112638",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112638"
    },
    {
      "name": "CVE-2026-112632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112632"
    },
    {
      "name": "CVE-2026-86973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86973"
    },
    {
      "name": "CVE-2026-112526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112526"
    },
    {
      "name": "CVE-2026-112642",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112642"
    },
    {
      "name": "CVE-2026-112444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112444"
    },
    {
      "name": "CVE-2026-113899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113899"
    },
    {
      "name": "CVE-2026-112675",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112675"
    },
    {
      "name": "CVE-2026-112604",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112604"
    },
    {
      "name": "CVE-2026-113906",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113906"
    },
    {
      "name": "CVE-2026-112488",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112488"
    },
    {
      "name": "CVE-2026-112531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112531"
    },
    {
      "name": "CVE-2026-112467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112467"
    },
    {
      "name": "CVE-2026-112624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112624"
    },
    {
      "name": "CVE-2026-112668",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112668"
    },
    {
      "name": "CVE-2026-112676",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112676"
    },
    {
      "name": "CVE-2026-112569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112569"
    },
    {
      "name": "CVE-2026-112432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112432"
    },
    {
      "name": "CVE-2026-112442",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112442"
    },
    {
      "name": "CVE-2026-112610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112610"
    },
    {
      "name": "CVE-2026-113900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113900"
    },
    {
      "name": "CVE-2026-112628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112628"
    },
    {
      "name": "CVE-2026-112421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112421"
    },
    {
      "name": "CVE-2026-112548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112548"
    },
    {
      "name": "CVE-2026-112423",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112423"
    },
    {
      "name": "CVE-2026-112699",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112699"
    },
    {
      "name": "CVE-2026-113941",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113941"
    },
    {
      "name": "CVE-2026-112576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112576"
    },
    {
      "name": "CVE-2026-112673",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112673"
    },
    {
      "name": "CVE-2026-112562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112562"
    },
    {
      "name": "CVE-2026-112693",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112693"
    },
    {
      "name": "CVE-2026-64750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64750"
    },
    {
      "name": "CVE-2026-112424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112424"
    },
    {
      "name": "CVE-2026-112706",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112706"
    },
    {
      "name": "CVE-2026-113913",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113913"
    },
    {
      "name": "CVE-2026-112454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112454"
    },
    {
      "name": "CVE-2022-26704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26704"
    },
    {
      "name": "CVE-2026-113903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113903"
    },
    {
      "name": "CVE-2026-86946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86946"
    },
    {
      "name": "CVE-2026-64767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64767"
    },
    {
      "name": "CVE-2026-112684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112684"
    },
    {
      "name": "CVE-2026-113934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113934"
    },
    {
      "name": "CVE-2026-112550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112550"
    },
    {
      "name": "CVE-2026-113952",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113952"
    },
    {
      "name": "CVE-2026-86942",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86942"
    },
    {
      "name": "CVE-2026-112476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112476"
    },
    {
      "name": "CVE-2026-65397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65397"
    },
    {
      "name": "CVE-2026-112536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112536"
    },
    {
      "name": "CVE-2026-112517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112517"
    },
    {
      "name": "CVE-2026-112519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112519"
    },
    {
      "name": "CVE-2026-65368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65368"
    },
    {
      "name": "CVE-2026-112680",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112680"
    },
    {
      "name": "CVE-2026-112665",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112665"
    },
    {
      "name": "CVE-2026-113935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113935"
    },
    {
      "name": "CVE-2026-86972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86972"
    },
    {
      "name": "CVE-2026-65327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65327"
    },
    {
      "name": "CVE-2026-112524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112524"
    },
    {
      "name": "CVE-2026-112493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112493"
    },
    {
      "name": "CVE-2026-112508",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112508"
    },
    {
      "name": "CVE-2026-112480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112480"
    },
    {
      "name": "CVE-2026-84590",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84590"
    },
    {
      "name": "CVE-2026-112547",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112547"
    },
    {
      "name": "CVE-2026-112438",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112438"
    },
    {
      "name": "CVE-2026-112512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112512"
    },
    {
      "name": "CVE-2026-112491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112491"
    },
    {
      "name": "CVE-2026-112516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112516"
    },
    {
      "name": "CVE-2026-112510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112510"
    },
    {
      "name": "CVE-2026-112534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112534"
    },
    {
      "name": "CVE-2026-112686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112686"
    },
    {
      "name": "CVE-2026-112690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112690"
    },
    {
      "name": "CVE-2026-20649",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20649"
    },
    {
      "name": "CVE-2026-112464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112464"
    },
    {
      "name": "CVE-2026-113938",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113938"
    },
    {
      "name": "CVE-2026-112545",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112545"
    },
    {
      "name": "CVE-2026-113940",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113940"
    },
    {
      "name": "CVE-2026-112656",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112656"
    },
    {
      "name": "CVE-2026-112555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112555"
    },
    {
      "name": "CVE-2026-65350",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65350"
    },
    {
      "name": "CVE-2026-112633",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112633"
    },
    {
      "name": "CVE-2026-20648",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20648"
    },
    {
      "name": "CVE-2026-112506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112506"
    },
    {
      "name": "CVE-2026-112595",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112595"
    },
    {
      "name": "CVE-2026-113901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113901"
    },
    {
      "name": "CVE-2026-112477",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112477"
    },
    {
      "name": "CVE-2026-112530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112530"
    },
    {
      "name": "CVE-2026-112552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112552"
    },
    {
      "name": "CVE-2026-112546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112546"
    },
    {
      "name": "CVE-2026-112461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112461"
    },
    {
      "name": "CVE-2026-112459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112459"
    },
    {
      "name": "CVE-2026-112441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112441"
    },
    {
      "name": "CVE-2026-112471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112471"
    },
    {
      "name": "CVE-2026-84493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84493"
    },
    {
      "name": "CVE-2026-86929",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86929"
    },
    {
      "name": "CVE-2026-112565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112565"
    },
    {
      "name": "CVE-2026-28991",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28991"
    },
    {
      "name": "CVE-2026-112479",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112479"
    },
    {
      "name": "CVE-2026-112596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112596"
    },
    {
      "name": "CVE-2026-86954",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86954"
    },
    {
      "name": "CVE-2026-84542",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84542"
    },
    {
      "name": "CVE-2026-112437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112437"
    },
    {
      "name": "CVE-2026-113909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113909"
    },
    {
      "name": "CVE-2026-112540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112540"
    },
    {
      "name": "CVE-2026-112681",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112681"
    },
    {
      "name": "CVE-2026-64789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64789"
    },
    {
      "name": "CVE-2026-86950",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86950"
    },
    {
      "name": "CVE-2026-86984",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86984"
    },
    {
      "name": "CVE-2026-86974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86974"
    },
    {
      "name": "CVE-2026-112494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112494"
    },
    {
      "name": "CVE-2026-112637",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112637"
    },
    {
      "name": "CVE-2026-112691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112691"
    },
    {
      "name": "CVE-2026-112468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112468"
    },
    {
      "name": "CVE-2026-113936",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113936"
    },
    {
      "name": "CVE-2026-112619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112619"
    },
    {
      "name": "CVE-2026-86971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86971"
    },
    {
      "name": "CVE-2026-112629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112629"
    },
    {
      "name": "CVE-2026-84614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84614"
    },
    {
      "name": "CVE-2026-112427",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112427"
    },
    {
      "name": "CVE-2026-112521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112521"
    },
    {
      "name": "CVE-2026-112470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112470"
    },
    {
      "name": "CVE-2026-112451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112451"
    },
    {
      "name": "CVE-2026-112617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112617"
    },
    {
      "name": "CVE-2026-112522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112522"
    },
    {
      "name": "CVE-2026-28864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28864"
    },
    {
      "name": "CVE-2026-112567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112567"
    },
    {
      "name": "CVE-2026-112655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112655"
    },
    {
      "name": "CVE-2026-112541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112541"
    },
    {
      "name": "CVE-2026-112697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112697"
    },
    {
      "name": "CVE-2026-112621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112621"
    },
    {
      "name": "CVE-2026-112670",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112670"
    },
    {
      "name": "CVE-2026-112688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112688"
    },
    {
      "name": "CVE-2026-112554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112554"
    },
    {
      "name": "CVE-2026-112505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112505"
    },
    {
      "name": "CVE-2026-112414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112414"
    },
    {
      "name": "CVE-2026-112415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112415"
    },
    {
      "name": "CVE-2026-86964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86964"
    },
    {
      "name": "CVE-2026-112557",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112557"
    },
    {
      "name": "CVE-2026-86970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86970"
    },
    {
      "name": "CVE-2026-112518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112518"
    },
    {
      "name": "CVE-2026-112429",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112429"
    },
    {
      "name": "CVE-2026-112469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-112469"
    },
    {
      "name": "CVE-2026-113949",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-113949"
    }
  ],
  "initial_release_date": "2026-10-27T00:00:00",
  "last_revision_date": "2026-10-27T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1387",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nApple indique que la vuln\u00e9rabilit\u00e9 CVE-2026-86950 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149524",
      "url": "https://support.apple.com/en-us/149524"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149521",
      "url": "https://support.apple.com/en-us/149521"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149225",
      "url": "https://support.apple.com/en-us/149225"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149227",
      "url": "https://support.apple.com/en-us/149227"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149525",
      "url": "https://support.apple.com/en-us/149525"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149527",
      "url": "https://support.apple.com/en-us/149527"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149230",
      "url": "https://support.apple.com/en-us/149230"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149526",
      "url": "https://support.apple.com/en-us/149526"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149523",
      "url": "https://support.apple.com/en-us/149523"
    },
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149522",
      "url": "https://support.apple.com/en-us/149522"
    }
  ]
}