GCVE-1988-2026-0453

Vulnerability from gna-1988 – Published: 2026-11-02 07:29 – Updated: 2026-11-02 07:29
VLAI
Title
APPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2 iOS 27.2 and iPadOS 27.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/149230. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Accelerate Framework Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86971: an anonymous researcher AccessorySetupKit Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: A malicious app may be able to access Bluetooth without user consent Description: An authentication issue was addressed with improved state management. CVE-2026-84493: Meta Red Team X - Nik Tsytsarkin Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: A malicious application may be able to bypass Privacy preferences Description: A logging issue was addressed with improved data redaction. CVE-2026-113898: Bhaswanth Chigurupati Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112446: LiangWei, Sindre Sorhus Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An attacker with physical access to a trust-paired device may be able to read and write arbitrary files Description: A path handling issue was addressed with improved validation. CVE-2026-112612: Johnny Franks (@0xjohnny), Daniel, KennethLi, an anonymous researcher App Intents Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with additional entitlement checks. CVE-2026-112692: Huy Nguyen (@34306) of Calif.io App Store Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-113914: Jaebin Sim (simjabin () gmail com) App Store Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: A remote attacker may be able to break out of the WebContent sandbox Description: This issue was addressed with improved input validation. CVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos Apple Intelligence Available for: iPhone 15 Pro and later, iPad Pro 12.9-inch 5th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 5th generation and later, and iPad mini 7th generation Impact: A remote attacker may be able to access sensitive user data Description: An authorization issue was addressed with improved entitlement checks. CVE-2026-86987: Richard Hyunho Im (@richeeta) at Route Zero Security Apple Neural Engine Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112696: Jaeyeong Lee Apple Neural Engine Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-84494: Meta Red Team X - Nik Tsytsarkin AppleAVD Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology, Inc, Hcamael and 章鱼哥@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta Red Team X - Nik Tsytsarkin AppleAVD Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or corrupt process memory Description: An out-of-bounds write was addressed with improved input validation. CVE-2026-112415: Hcamael and 章鱼哥@aipy (aipyaipy.com), Rahul Raj AppleAVD Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory Description: The issue was addressed with improved memory handling. CVE-2026-112454: @Licht_jb, Hcamael and 章鱼哥@aipy (aipyaipy.com) Audio Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted file may lead to unexpected app termination Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx (@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding), Nathaniel Oh (@calysteon) AVEVideoEncoder Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io AVEVideoEncoder Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved input validation. CVE-2026-112689: Franco Belman at Blackwing Intelligence AVEVideoEncoder Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or corrupt kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112470: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112469: Hcamael and 章鱼哥@aipy (aipyaipy.com) CVE-2026-112468: Hcamael and 章鱼哥@aipy (aipyaipy.com) AVEVideoEncoder Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or read kernel memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2026-112466: Hcamael and 章鱼哥@aipy (aipyaipy.com) Bluetooth Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An attacker in physical proximity may be able to cause a denial-of-service Description: A null pointer dereference was addressed with improved validation. CVE-2026-112566: Chris Bailey - Short Circuit CVE-2026-113906: Chris Bailey - Short Circuit Calendar Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: A permissions issue was addressed with additional restrictions. CVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re) Calendar Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted calendar invitation may lead to memory corruption Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-112619: Ivan Fratric of Google Project Zero CloudKit Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-112701: N.M.Praveen Nawarathne (@zblockrat) ColorSync Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted image may result in disclosure of process memory Description: The issue was addressed with improved checks. CVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X - - Nik Tsytsarkin Compression Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th ge
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 552 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
unknown iOS Affected: unknown
guessed Create a notification for this product.
Credits
Apple Product Security via Fulldisclosure
Relationships
reference GCVE-1988-2026-0453 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Apple Product Security via Fulldisclosure"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\nAPPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2\n\niOS 27.2 and iPadOS 27.2 addresses the following issues.\nInformation about the security content is also available at\nhttps://support.apple.com/149230.\n\nApple maintains a Security Releases page at\nhttps://support.apple.com/100100 which lists recent\nsoftware updates with security advisories.\n\nAccelerate Framework\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: Processing a maliciously crafted image may lead to unexpected\napp termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-86971: an anonymous researcher\n\nAccessorySetupKit\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: A malicious app may be able to access Bluetooth without user\nconsent\nDescription: An authentication issue was addressed with improved state\nmanagement.\nCVE-2026-84493: Meta Red Team X - Nik Tsytsarkin\n\nAccounts\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: A malicious application may be able to bypass Privacy\npreferences\nDescription: A logging issue was addressed with improved data redaction.\nCVE-2026-113898: Bhaswanth Chigurupati\n\nAccounts\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112446: LiangWei, Sindre Sorhus\n\nAccounts\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An attacker with physical access to a trust-paired device may be\nable to read and write arbitrary files\nDescription: A path handling issue was addressed with improved\nvalidation.\nCVE-2026-112612: Johnny Franks (@0xjohnny), Daniel, KennethLi, an\nanonymous researcher\n\nApp Intents\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to access sensitive user data\nDescription: This issue was addressed with additional entitlement\nchecks.\nCVE-2026-112692: Huy Nguyen (@34306) of Calif.io\n\nApp Store\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-113914: Jaebin Sim (simjabin () gmail com)\n\nApp Store\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: A remote attacker may be able to break out of the WebContent\nsandbox\nDescription: This issue was addressed with improved input validation.\nCVE-2026-112690: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nApple Intelligence\nAvailable for: iPhone 15 Pro and later, iPad Pro 12.9-inch 5th\ngeneration and later, iPad Pro 11-inch 2nd generation and later, iPad\nAir 5th generation and later, and iPad mini 7th generation\nImpact: A remote attacker may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved\nentitlement checks.\nCVE-2026-86987: Richard Hyunho Im (@richeeta) at Route Zero Security\n\nApple Neural Engine\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112696: Jaeyeong Lee\n\nApple Neural Engine\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination or\nwrite kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-84494: Meta Red Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112416: an anonymous researcher, Dohyeon An @PILAB Technology,\nInc, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Narendra Singh (@_3P1C), Meta\nRed Team X - Nik Tsytsarkin\n\nAppleAVD\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt process memory\nDescription: An out-of-bounds write was addressed with improved input\nvalidation.\nCVE-2026-112415: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com), Rahul Raj\n\nAppleAVD\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: Processing a maliciously crafted video file may lead to\nunexpected app termination or corrupt process memory\nDescription: The issue was addressed with improved memory handling.\nCVE-2026-112454: @Licht_jb, Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAudio\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: Processing a maliciously crafted file may lead to unexpected app\ntermination\nDescription: An out-of-bounds read was addressed with improved bounds\nchecking.\nCVE-2026-112546: lunar815, Surej Sekhar, Piotr Jerzy Duszynski, r3pwnx\n(@r3pwnx), an anonymous researcher, Lily Cohl (@GenericCoding),\nNathaniel Oh (@calysteon)\n\nAVEVideoEncoder\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112705: Marco Schmitt, Andrey Chernykh, Josh Maine of Calif.io\n\nAVEVideoEncoder\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\ninput validation.\nCVE-2026-112689: Franco Belman at Blackwing Intelligence\n\nAVEVideoEncoder\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination or\ncorrupt kernel memory\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112470: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112469: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\nCVE-2026-112468: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nAVEVideoEncoder\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to cause unexpected system termination or\nread kernel memory\nDescription: An out-of-bounds read was addressed with improved input\nvalidation.\nCVE-2026-112466: Hcamael and \u7ae0\u9c7c\u54e5@aipy (aipyaipy.com)\n\nBluetooth\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An attacker in physical proximity may be able to cause a\ndenial-of-service\nDescription: A null pointer dereference was addressed with improved\nvalidation.\nCVE-2026-112566: Chris Bailey - Short Circuit\nCVE-2026-113906: Chris Bailey - Short Circuit\n\nCalendar\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to access sensitive user data\nDescription: A permissions issue was addressed with additional\nrestrictions.\nCVE-2026-112678: Neon, Niels Hofmans, Mustafa Calap (@ordinal0, dbg.re)\n\nCalendar\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: Processing a maliciously crafted calendar invitation may lead to\nmemory corruption\nDescription: An out-of-bounds write issue was addressed with improved\nbounds checking.\nCVE-2026-112619: Ivan Fratric of Google Project Zero\n\nCloudKit\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: An app may be able to access sensitive user data\nDescription: An authorization issue was addressed with improved state\nmanagement.\nCVE-2026-112701: N.M.Praveen Nawarathne (@zblockrat)\n\nColorSync\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\ngeneration and later\nImpact: Processing a maliciously crafted image may result in disclosure\nof process memory\nDescription: The issue was addressed with improved checks.\nCVE-2026-86988: Mateusz Jurczyk of Google Project Zero, Meta Red Team X\n- - Nik Tsytsarkin\n\nCompression\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation\nand later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th\ngeneration and later, iPad 9th generation and later, and iPad mini 6th\nge"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T07:29:56Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/39"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Oct/39"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://support.apple.com/100100"
        },
        {
          "url": "https://support.apple.com/149230"
        },
        {
          "url": "https://www.apple.com/itunes/"
        },
        {
          "url": "https://www.apple.com/support/security/pgp/"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Oct/39"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "APPLE-SA-10-26-2026-1 iOS 27.2 and iPadOS 27.2",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2022-26704",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112413",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112414",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112415",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112416",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112423",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112425",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112432",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112446",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112449",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112454",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112455",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112456",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112459",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112461",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112464",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112466",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112468",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112469",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112470",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112474",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112476",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112477",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112479",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112485",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112486",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112488",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112491",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112500",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112501",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112507",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112514",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112515",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112516",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112517",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112518",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112522",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112546",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112547",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112554",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112559",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112561",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112565",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112566",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112567",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112571",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112576",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112595",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112596",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112599",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112606",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112607",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112609",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112610",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112611",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112612",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112614",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112615",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112616",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112618",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112619",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112620",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112621",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112622",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112623",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112624",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112625",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112626",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112627",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112628",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112629",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112630",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112632",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112633",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112634",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112637",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112638",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112639",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112640",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112642",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112646",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112651",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112652",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112653",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112654",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112655",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112656",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112658",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112659",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112660",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112665",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112666",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112669",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112671",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112673",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112676",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112678",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112679",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112680",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112681",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112682",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112683",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112684",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112685",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112686",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112687",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112688",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112689",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112690",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112691",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112692",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112693",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112695",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112697",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112698",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112699",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112701",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112705",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112706",
              "type": "related"
            },
            {
              "destId": "CVE-2026-112707",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113896",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113898",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113901",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113903",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113904",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113906",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113907",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113908",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113909",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113910",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113912",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113913",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113914",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113915",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113949",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113950",
              "type": "related"
            },
            {
              "destId": "CVE-2026-113952",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65350",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65385",
              "type": "related"
            },
            {
              "destId": "CVE-2026-65397",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84493",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84494",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84495",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84605",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86925",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86968",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86969",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86970",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86971",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86972",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86973",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86974",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86978",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86985",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86986",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86987",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86988",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86989",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86990",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86991",
              "type": "related"
            },
            {
              "destId": "CVE-2026-86992",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0453",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Oct/39",
            "automated": true,
            "contentSha256": "608ad1d42f9d13a1f4162d1115c6c88b9be87a87a3d1621814a7236fcce7a04d",
            "evidenceScore": 7,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Oct/39",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-10-26T21:40:26Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0453"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T07:29:56Z",
    "dateUpdated": "2026-11-02T07:29:56Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0453"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.