New Apple CVEs — apple-cve.com https://apple-cve.com/feeds/cves 2026-10-02T15:58:27Z apple-cve.com CVE-2026-86950: CoreGraphics (exploited) https://apple-cve.com/cve/CVE-2026-86950 2026-09-28T00:00:00Z Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27. CVE-2026-86924: MobileAccessoryUpdater https://apple-cve.com/cve/CVE-2026-86924 2026-09-14T00:00:00Z Connecting a malicious accessory may cause unexpected system termination CVE-2026-86917: Kernel https://apple-cve.com/cve/CVE-2026-86917 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-86911: Foundation https://apple-cve.com/cve/CVE-2026-86911 2026-09-14T00:00:00Z A malicious app may be able to bypass clickjacking protections for secure prompts CVE-2026-86910: APFS https://apple-cve.com/cve/CVE-2026-86910 2026-09-14T00:00:00Z An application may be able to access restricted files CVE-2026-86909: System Settings https://apple-cve.com/cve/CVE-2026-86909 2026-09-14T00:00:00Z An app may be able to bypass Gatekeeper checks CVE-2026-86905: Authentication Services https://apple-cve.com/cve/CVE-2026-86905 2026-09-14T00:00:00Z An app may be able to delete credentials stored in Keychain CVE-2026-86904: Watch App https://apple-cve.com/cve/CVE-2026-86904 2026-09-14T00:00:00Z An app may be able to track users across apps and websites without permission CVE-2026-86903: Kernel https://apple-cve.com/cve/CVE-2026-86903 2026-09-14T00:00:00Z An app may be able to disclose kernel memory CVE-2026-86901: exFAT https://apple-cve.com/cve/CVE-2026-86901 2026-09-14T00:00:00Z Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure CVE-2026-86900: exFAT https://apple-cve.com/cve/CVE-2026-86900 2026-09-14T00:00:00Z Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure CVE-2026-86898: WebKit https://apple-cve.com/cve/CVE-2026-86898 2026-09-14T00:00:00Z Opening a maliciously crafted webarchive file may lead to universal cross-site scripting CVE-2026-86897: Safe Browsing https://apple-cve.com/cve/CVE-2026-86897 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-86895: CloudKit https://apple-cve.com/cve/CVE-2026-86895 2026-09-14T00:00:00Z A local app may be able to read a persistent account identifier CVE-2026-86894: libxpc https://apple-cve.com/cve/CVE-2026-86894 2026-09-14T00:00:00Z An app may be able to break out of its sandbox CVE-2026-86893: CloudKit https://apple-cve.com/cve/CVE-2026-86893 2026-09-14T00:00:00Z An app may be able to read device name CVE-2026-86892: SpringBoard https://apple-cve.com/cve/CVE-2026-86892 2026-09-14T00:00:00Z An app may be able to cause a denial-of-service CVE-2026-86891: Core Bluetooth https://apple-cve.com/cve/CVE-2026-86891 2026-09-14T00:00:00Z An app may be able to access Bluetooth device information CVE-2026-86890: Siri Suggestions https://apple-cve.com/cve/CVE-2026-86890 2026-09-14T00:00:00Z An attacker with physical access to a locked device may be able to view sensitive user information CVE-2026-86889: Security https://apple-cve.com/cve/CVE-2026-86889 2026-09-14T00:00:00Z An attacker in a privileged network position may be able to intercept network traffic CVE-2026-86888: App Store https://apple-cve.com/cve/CVE-2026-86888 2026-09-14T00:00:00Z A local app may be able to read a persistent account identifier CVE-2026-86887: Time Zone https://apple-cve.com/cve/CVE-2026-86887 2026-09-14T00:00:00Z An app may be able to bypass certain Privacy preferences CVE-2026-86886: TCC https://apple-cve.com/cve/CVE-2026-86886 2026-09-14T00:00:00Z An app may be able to modify protected system files CVE-2026-86885: Baseband https://apple-cve.com/cve/CVE-2026-86885 2026-09-14T00:00:00Z An attacker in radio range may be able to cause unexpected system termination CVE-2026-86884: Siri https://apple-cve.com/cve/CVE-2026-86884 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-86883: Managed Configuration https://apple-cve.com/cve/CVE-2026-86883 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-86882: Accelerate Framework https://apple-cve.com/cve/CVE-2026-86882 2026-09-14T00:00:00Z Processing a maliciously crafted image may lead to unexpected process termination CVE-2026-86881: Security https://apple-cve.com/cve/CVE-2026-86881 2026-09-14T00:00:00Z An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages CVE-2026-86879: Baseband https://apple-cve.com/cve/CVE-2026-86879 2026-09-14T00:00:00Z A remote attacker may be able to cause a denial-of-service CVE-2026-86878: Camera https://apple-cve.com/cve/CVE-2026-86878 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-86876: CoreMedia https://apple-cve.com/cve/CVE-2026-86876 2026-09-14T00:00:00Z A sandboxed process may be able to circumvent sandbox restrictions CVE-2026-86870: libarchive https://apple-cve.com/cve/CVE-2026-86870 2026-09-14T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination CVE-2026-86869: ImageIO https://apple-cve.com/cve/CVE-2026-86869 2026-09-14T00:00:00Z Processing a maliciously crafted image may lead to unexpected app termination CVE-2026-84636: Wi-Fi Connectivity https://apple-cve.com/cve/CVE-2026-84636 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84635: WebKit https://apple-cve.com/cve/CVE-2026-84635 2026-09-14T00:00:00Z Processing maliciously crafted web content may lead to an unexpected process termination CVE-2026-84632: SceneKit https://apple-cve.com/cve/CVE-2026-84632 2026-09-14T00:00:00Z Processing a maliciously crafted 3D model may lead to memory corruption CVE-2026-84631: Bluetooth https://apple-cve.com/cve/CVE-2026-84631 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-84630: Kernel https://apple-cve.com/cve/CVE-2026-84630 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84629: Photos Storage https://apple-cve.com/cve/CVE-2026-84629 2026-09-14T00:00:00Z An app may be able to fingerprint the user CVE-2026-84628: MediaRemote https://apple-cve.com/cve/CVE-2026-84628 2026-09-14T00:00:00Z A sandboxed app may be able to access the System Keychain CVE-2026-84626: NetworkExtension https://apple-cve.com/cve/CVE-2026-84626 2026-09-14T00:00:00Z An app may be able to identify what other apps a user has installed CVE-2026-84625: Sandbox Profiles https://apple-cve.com/cve/CVE-2026-84625 2026-09-14T00:00:00Z An app may be able to fingerprint the user CVE-2026-84624: CoreML https://apple-cve.com/cve/CVE-2026-84624 2026-09-14T00:00:00Z A sandboxed app may be able to access restricted files CVE-2026-84623: Power Management https://apple-cve.com/cve/CVE-2026-84623 2026-09-14T00:00:00Z An app may be able to fingerprint the device CVE-2026-84622: Kernel https://apple-cve.com/cve/CVE-2026-84622 2026-09-14T00:00:00Z An app with root privileges may be able to read uninitialized kernel memory CVE-2026-84621: Spotlight https://apple-cve.com/cve/CVE-2026-84621 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84620: SceneKit https://apple-cve.com/cve/CVE-2026-84620 2026-09-14T00:00:00Z Processing a maliciously crafted 3D model may lead to memory corruption CVE-2026-84619: Kernel https://apple-cve.com/cve/CVE-2026-84619 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or write kernel memory CVE-2026-84618: Game Center https://apple-cve.com/cve/CVE-2026-84618 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84617: XPC https://apple-cve.com/cve/CVE-2026-84617 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84616: AVEVideoEncoder https://apple-cve.com/cve/CVE-2026-84616 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84615: Music https://apple-cve.com/cve/CVE-2026-84615 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84612: DeviceCheck https://apple-cve.com/cve/CVE-2026-84612 2026-09-14T00:00:00Z An app may be able to read persistent device identifiers CVE-2026-84611: SceneKit https://apple-cve.com/cve/CVE-2026-84611 2026-09-14T00:00:00Z Processing a maliciously crafted 3D model may lead to memory corruption CVE-2026-84609: Software Update https://apple-cve.com/cve/CVE-2026-84609 2026-09-14T00:00:00Z An app may be able to modify protected system files CVE-2026-84607: AVEVideoEncoder https://apple-cve.com/cve/CVE-2026-84607 2026-09-14T00:00:00Z A sandboxed app may be able to execute arbitrary code with kernel privileges CVE-2026-84606: iCloud https://apple-cve.com/cve/CVE-2026-84606 2026-09-14T00:00:00Z An app may be able to identify a user across reinstalls CVE-2026-84603: Sandbox Profiles https://apple-cve.com/cve/CVE-2026-84603 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84602: Kernel https://apple-cve.com/cve/CVE-2026-84602 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84601: Apple Intelligence https://apple-cve.com/cve/CVE-2026-84601 2026-09-14T00:00:00Z An app may be able to bypass Apple Intelligence security prompts CVE-2026-84600: Shortcuts https://apple-cve.com/cve/CVE-2026-84600 2026-09-14T00:00:00Z A malicious shortcut may be able to send messages without user confirmation CVE-2026-84598: MobileBackup https://apple-cve.com/cve/CVE-2026-84598 2026-09-14T00:00:00Z An attacker with physical access to a trust-paired device may be able to read and write arbitrary files CVE-2026-84597: FontParser https://apple-cve.com/cve/CVE-2026-84597 2026-09-14T00:00:00Z Processing a maliciously crafted font may result in the disclosure of process memory CVE-2026-84596: CoreText https://apple-cve.com/cve/CVE-2026-84596 2026-09-14T00:00:00Z Processing a maliciously crafted font may result in the disclosure of process memory CVE-2026-84593: AppleKeyStore https://apple-cve.com/cve/CVE-2026-84593 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84589: TCC https://apple-cve.com/cve/CVE-2026-84589 2026-09-14T00:00:00Z An app may be able to modify Privacy preferences CVE-2026-84588: Kernel https://apple-cve.com/cve/CVE-2026-84588 2026-09-14T00:00:00Z Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory CVE-2026-84587: AppKit https://apple-cve.com/cve/CVE-2026-84587 2026-09-14T00:00:00Z An app may be able to access protected user data CVE-2026-84586: Apple Account https://apple-cve.com/cve/CVE-2026-84586 2026-09-14T00:00:00Z A malicious application may be able to leak sensitive user information CVE-2026-84585: NetworkExtension https://apple-cve.com/cve/CVE-2026-84585 2026-09-14T00:00:00Z An app may be able to access local network devices without user consent CVE-2026-84584: Archive Utility https://apple-cve.com/cve/CVE-2026-84584 2026-09-14T00:00:00Z An app may be able to break out of its sandbox CVE-2026-84583: AuthKit https://apple-cve.com/cve/CVE-2026-84583 2026-09-14T00:00:00Z A local app may be able to read a persistent account identifier CVE-2026-84581: HFS https://apple-cve.com/cve/CVE-2026-84581 2026-09-14T00:00:00Z Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory CVE-2026-84580: quarantine https://apple-cve.com/cve/CVE-2026-84580 2026-09-14T00:00:00Z An app may be able to break out of its sandbox CVE-2026-84578: quarantine https://apple-cve.com/cve/CVE-2026-84578 2026-09-14T00:00:00Z An app may be able to break out of its sandbox CVE-2026-84577: libxpc https://apple-cve.com/cve/CVE-2026-84577 2026-09-14T00:00:00Z An app may be able to bypass sandbox restrictions CVE-2026-84576: QuartzCore https://apple-cve.com/cve/CVE-2026-84576 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84575: CoreUI https://apple-cve.com/cve/CVE-2026-84575 2026-09-14T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination CVE-2026-84574: CoreServices https://apple-cve.com/cve/CVE-2026-84574 2026-09-14T00:00:00Z An app may be able to bypass Privacy preferences CVE-2026-84573: Mail https://apple-cve.com/cve/CVE-2026-84573 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84572: udf https://apple-cve.com/cve/CVE-2026-84572 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or read kernel memory CVE-2026-84571: CoreUI https://apple-cve.com/cve/CVE-2026-84571 2026-09-14T00:00:00Z Processing a maliciously crafted image may lead to unexpected app termination CVE-2026-84570: autofs https://apple-cve.com/cve/CVE-2026-84570 2026-09-14T00:00:00Z An app may be able to bypass Gatekeeper checks CVE-2026-84569: Foundation https://apple-cve.com/cve/CVE-2026-84569 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84568: autofs https://apple-cve.com/cve/CVE-2026-84568 2026-09-14T00:00:00Z An attacker with control of a network directory server may be able to execute arbitrary code with root privileges CVE-2026-84567: cd9660 https://apple-cve.com/cve/CVE-2026-84567 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84566: Kernel https://apple-cve.com/cve/CVE-2026-84566 2026-09-14T00:00:00Z A local attacker may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-84565: Disk Images https://apple-cve.com/cve/CVE-2026-84565 2026-09-14T00:00:00Z Processing a maliciously crafted disk image may lead to unexpected app termination CVE-2026-84564: ImageIO https://apple-cve.com/cve/CVE-2026-84564 2026-09-14T00:00:00Z Processing a maliciously crafted image may result in disclosure of process memory CVE-2026-84563: CUPS https://apple-cve.com/cve/CVE-2026-84563 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84561: Kernel https://apple-cve.com/cve/CVE-2026-84561 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-84560: Bluetooth https://apple-cve.com/cve/CVE-2026-84560 2026-09-14T00:00:00Z An app may gain unauthorized access to Bluetooth CVE-2026-84559: CoreServices https://apple-cve.com/cve/CVE-2026-84559 2026-09-14T00:00:00Z A malicious application may be able to access restricted files CVE-2026-84558: Kernel https://apple-cve.com/cve/CVE-2026-84558 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84556: Keychain Access https://apple-cve.com/cve/CVE-2026-84556 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84555: Sandbox https://apple-cve.com/cve/CVE-2026-84555 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84554: CUPS https://apple-cve.com/cve/CVE-2026-84554 2026-09-14T00:00:00Z An attacker in a privileged network position may be able to cause a denial-of-service CVE-2026-84553: smbx https://apple-cve.com/cve/CVE-2026-84553 2026-09-14T00:00:00Z A remote attacker may be able to cause a denial-of-service CVE-2026-84552: Disk Images https://apple-cve.com/cve/CVE-2026-84552 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84551: Sandbox https://apple-cve.com/cve/CVE-2026-84551 2026-09-14T00:00:00Z An app may be able to bypass network restrictions CVE-2026-84550: Disk Images https://apple-cve.com/cve/CVE-2026-84550 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84549: Kernel https://apple-cve.com/cve/CVE-2026-84549 2026-09-14T00:00:00Z Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory CVE-2026-84548: Quick Look https://apple-cve.com/cve/CVE-2026-84548 2026-09-14T00:00:00Z Processing a maliciously crafted document may lead to an out-of-bounds read CVE-2026-84546: SceneKit https://apple-cve.com/cve/CVE-2026-84546 2026-09-14T00:00:00Z Processing a maliciously crafted 3D model may lead to memory corruption CVE-2026-84544: Kernel https://apple-cve.com/cve/CVE-2026-84544 2026-09-14T00:00:00Z Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory CVE-2026-84543: SMB https://apple-cve.com/cve/CVE-2026-84543 2026-09-14T00:00:00Z Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory CVE-2026-84541: CUPS https://apple-cve.com/cve/CVE-2026-84541 2026-09-14T00:00:00Z An application may be able to access restricted files CVE-2026-84540: CUPS https://apple-cve.com/cve/CVE-2026-84540 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84538: Kernel https://apple-cve.com/cve/CVE-2026-84538 2026-09-14T00:00:00Z A remote attacker may be able to cause a denial-of-service CVE-2026-84537: SMB https://apple-cve.com/cve/CVE-2026-84537 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-84536: SMB https://apple-cve.com/cve/CVE-2026-84536 2026-09-14T00:00:00Z Connecting to a malicious SMB server may lead to unexpected system termination CVE-2026-84535: Automator https://apple-cve.com/cve/CVE-2026-84535 2026-09-14T00:00:00Z An app may be able to break out of its sandbox CVE-2026-84534: file_cmds https://apple-cve.com/cve/CVE-2026-84534 2026-09-14T00:00:00Z Extracting a maliciously crafted archive may allow an attacker to write arbitrary files CVE-2026-84533: Heimdal https://apple-cve.com/cve/CVE-2026-84533 2026-09-14T00:00:00Z An attacker in a privileged network position may be able to modify network traffic CVE-2026-84532: RealityKit https://apple-cve.com/cve/CVE-2026-84532 2026-09-14T00:00:00Z Opening a maliciously crafted file may cause unexpected process termination or disclose process memory CVE-2026-84531: Security https://apple-cve.com/cve/CVE-2026-84531 2026-09-14T00:00:00Z Processing maliciously crafted NTLM input may lead to unexpected app termination CVE-2026-84530: Kernel https://apple-cve.com/cve/CVE-2026-84530 2026-09-14T00:00:00Z An app may be able to disclose kernel memory CVE-2026-84527: TCC https://apple-cve.com/cve/CVE-2026-84527 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84526: SceneKit https://apple-cve.com/cve/CVE-2026-84526 2026-09-14T00:00:00Z Processing a maliciously crafted 3D scene may lead to unexpected process termination CVE-2026-84525: ATS https://apple-cve.com/cve/CVE-2026-84525 2026-09-14T00:00:00Z An app may be able to access user-sensitive data CVE-2026-84524: FontParser https://apple-cve.com/cve/CVE-2026-84524 2026-09-14T00:00:00Z Processing a maliciously crafted font file may lead to unexpected app termination CVE-2026-84523: APFS https://apple-cve.com/cve/CVE-2026-84523 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or write kernel memory CVE-2026-84522: Archive Utility https://apple-cve.com/cve/CVE-2026-84522 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84521: Kernel https://apple-cve.com/cve/CVE-2026-84521 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84520: AppleFDEKeyStore https://apple-cve.com/cve/CVE-2026-84520 2026-09-14T00:00:00Z A local attacker may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-84519: AppleDouble https://apple-cve.com/cve/CVE-2026-84519 2026-09-14T00:00:00Z Mounting a disk image with maliciously crafted files may lead to unexpected system termination CVE-2026-84518: Safari https://apple-cve.com/cve/CVE-2026-84518 2026-09-14T00:00:00Z A malicious website may be able to determine what apps a user has installed CVE-2026-84517: Kernel https://apple-cve.com/cve/CVE-2026-84517 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84516: CUPS https://apple-cve.com/cve/CVE-2026-84516 2026-09-14T00:00:00Z Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory CVE-2026-84515: SMB https://apple-cve.com/cve/CVE-2026-84515 2026-09-14T00:00:00Z Connecting to a malicious SMB server may lead to kernel memory corruption CVE-2026-84514: Kext Management https://apple-cve.com/cve/CVE-2026-84514 2026-09-14T00:00:00Z An app may be able to modify protected parts of the file system CVE-2026-84513: Symptom Framework https://apple-cve.com/cve/CVE-2026-84513 2026-09-14T00:00:00Z A malicious application may be able to determine a user's current location CVE-2026-84512: Disk Images https://apple-cve.com/cve/CVE-2026-84512 2026-09-14T00:00:00Z Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory CVE-2026-84511: CoreUI https://apple-cve.com/cve/CVE-2026-84511 2026-09-14T00:00:00Z Processing a maliciously crafted asset catalog may lead to unexpected process termination CVE-2026-84510: exFAT https://apple-cve.com/cve/CVE-2026-84510 2026-09-14T00:00:00Z Mounting a maliciously crafted volume may lead to unexpected system termination CVE-2026-84509: SMB https://apple-cve.com/cve/CVE-2026-84509 2026-09-14T00:00:00Z Connecting to a malicious SMB server may lead to unexpected system termination CVE-2026-84507: Kernel https://apple-cve.com/cve/CVE-2026-84507 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-84506: udf https://apple-cve.com/cve/CVE-2026-84506 2026-09-14T00:00:00Z An app may be able to execute arbitrary code with kernel privileges CVE-2026-84505: Directory Utility https://apple-cve.com/cve/CVE-2026-84505 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-84497: Model I/O https://apple-cve.com/cve/CVE-2026-84497 2026-09-14T00:00:00Z Opening a maliciously crafted file may lead to unexpected process termination CVE-2026-84492: Graphics https://apple-cve.com/cve/CVE-2026-84492 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-84491: Photos https://apple-cve.com/cve/CVE-2026-84491 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-84487: SceneKit https://apple-cve.com/cve/CVE-2026-84487 2026-09-14T00:00:00Z Processing a maliciously crafted file may result in disclosure of process memory CVE-2026-65415: Kernel https://apple-cve.com/cve/CVE-2026-65415 2026-09-14T00:00:00Z A local user may be able to cause unexpected system termination or read kernel memory CVE-2026-65414: Bluetooth https://apple-cve.com/cve/CVE-2026-65414 2026-09-14T00:00:00Z A remote attacker may be able to cause unexpected app termination or arbitrary code execution CVE-2026-65413: SceneKit https://apple-cve.com/cve/CVE-2026-65413 2026-09-14T00:00:00Z An app may be able to cause a denial of service CVE-2026-65412: CoreText https://apple-cve.com/cve/CVE-2026-65412 2026-09-14T00:00:00Z Processing web content may lead to a denial-of-service CVE-2026-65411: MobileBackup https://apple-cve.com/cve/CVE-2026-65411 2026-09-14T00:00:00Z An app may be able to modify protected parts of the file system CVE-2026-65410: AVEVideoEncoder https://apple-cve.com/cve/CVE-2026-65410 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65409: Foundation https://apple-cve.com/cve/CVE-2026-65409 2026-09-14T00:00:00Z An app may be able to cause a denial of service CVE-2026-65408: Apple Neural Engine https://apple-cve.com/cve/CVE-2026-65408 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65406: BackgroundAssets https://apple-cve.com/cve/CVE-2026-65406 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-65405: Kernel https://apple-cve.com/cve/CVE-2026-65405 2026-09-14T00:00:00Z An app may be able to determine kernel memory layout CVE-2026-65403: Reminders https://apple-cve.com/cve/CVE-2026-65403 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-65402: Kernel https://apple-cve.com/cve/CVE-2026-65402 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65401: Kernel https://apple-cve.com/cve/CVE-2026-65401 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65399: copyfile https://apple-cve.com/cve/CVE-2026-65399 2026-09-14T00:00:00Z An archive may be able to bypass Gatekeeper CVE-2026-65398: IOMobileFrameBuffer https://apple-cve.com/cve/CVE-2026-65398 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-65395: ImageIO https://apple-cve.com/cve/CVE-2026-65395 2026-09-14T00:00:00Z Processing a maliciously crafted image may result in memory corruption CVE-2026-65393: Xcode IDE https://apple-cve.com/cve/CVE-2026-65393 2026-09-14T00:00:00Z An app may be able to access user-sensitive data CVE-2026-65383: System Settings https://apple-cve.com/cve/CVE-2026-65383 2026-09-14T00:00:00Z An app may bypass Gatekeeper checks CVE-2026-65382: LaunchServices https://apple-cve.com/cve/CVE-2026-65382 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-65381: AppleMobileFileIntegrity https://apple-cve.com/cve/CVE-2026-65381 2026-09-14T00:00:00Z A malicious app may be able to break out of its sandbox CVE-2026-65380: Sandbox https://apple-cve.com/cve/CVE-2026-65380 2026-09-14T00:00:00Z An app may be able to access protected user data CVE-2026-65378: Spotlight https://apple-cve.com/cve/CVE-2026-65378 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-65377: Kernel https://apple-cve.com/cve/CVE-2026-65377 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65376: SMB https://apple-cve.com/cve/CVE-2026-65376 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65374: WebDAV https://apple-cve.com/cve/CVE-2026-65374 2026-09-14T00:00:00Z Connecting to a malicious WebDAV server may result in code execution CVE-2026-65369: Kernel https://apple-cve.com/cve/CVE-2026-65369 2026-09-14T00:00:00Z A malicious application may bypass Gatekeeper checks CVE-2026-65365: SMB https://apple-cve.com/cve/CVE-2026-65365 2026-09-14T00:00:00Z Connecting to a malicious SMB share may disclose kernel memory CVE-2026-65364: Kernel https://apple-cve.com/cve/CVE-2026-65364 2026-09-14T00:00:00Z A remote attacker may be able to cause unexpected system termination CVE-2026-65362: Disk Images https://apple-cve.com/cve/CVE-2026-65362 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-65361: SoftwareUpdate https://apple-cve.com/cve/CVE-2026-65361 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-65360: Kernel https://apple-cve.com/cve/CVE-2026-65360 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65359: Kernel https://apple-cve.com/cve/CVE-2026-65359 2026-09-14T00:00:00Z A local user may be able to cause unexpected system termination or read kernel memory CVE-2026-65358: Kernel https://apple-cve.com/cve/CVE-2026-65358 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65354: iWork https://apple-cve.com/cve/CVE-2026-65354 2026-09-14T00:00:00Z A malicious app may be able to break out of its sandbox CVE-2026-65348: Storage https://apple-cve.com/cve/CVE-2026-65348 2026-09-14T00:00:00Z An app may be able to modify protected parts of the file system CVE-2026-65345: Storage https://apple-cve.com/cve/CVE-2026-65345 2026-09-14T00:00:00Z An app may be able to access user-sensitive data CVE-2026-65344: CoreMedia https://apple-cve.com/cve/CVE-2026-65344 2026-09-14T00:00:00Z Processing a maliciously crafted video file may lead to unexpected app termination CVE-2026-65342: ATS https://apple-cve.com/cve/CVE-2026-65342 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-64790: CUPS https://apple-cve.com/cve/CVE-2026-64790 2026-09-14T00:00:00Z An app may be able to gain elevated privileges CVE-2026-64761: Accessibility https://apple-cve.com/cve/CVE-2026-64761 2026-09-14T00:00:00Z An app may be able to identify what other apps a user has installed CVE-2026-64756: Image Capture https://apple-cve.com/cve/CVE-2026-64756 2026-09-14T00:00:00Z An app may be able to access user-sensitive data CVE-2026-64753: WebKit https://apple-cve.com/cve/CVE-2026-64753 2026-09-14T00:00:00Z Processing maliciously crafted web content may disclose sensitive user information CVE-2026-64752: CoreMedia https://apple-cve.com/cve/CVE-2026-64752 2026-09-14T00:00:00Z Processing a maliciously crafted image may lead to arbitrary code execution CVE-2026-64712: odproxyd https://apple-cve.com/cve/CVE-2026-64712 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-43791: StorageKit https://apple-cve.com/cve/CVE-2026-43791 2026-09-14T00:00:00Z An app may be able to read arbitrary files CVE-2026-43790: Kernel https://apple-cve.com/cve/CVE-2026-43790 2026-09-14T00:00:00Z A remote attacker may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-43789: CoreMedia https://apple-cve.com/cve/CVE-2026-43789 2026-09-14T00:00:00Z An app may be able to access user-sensitive data CVE-2026-43788: Spotlight https://apple-cve.com/cve/CVE-2026-43788 2026-09-14T00:00:00Z Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents CVE-2026-43787: Mail https://apple-cve.com/cve/CVE-2026-43787 2026-09-14T00:00:00Z An attacker in a privileged network position may be able to leak sensitive user information CVE-2026-43786: CoreServices https://apple-cve.com/cve/CVE-2026-43786 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-43785: File Bookmark https://apple-cve.com/cve/CVE-2026-43785 2026-09-14T00:00:00Z An app may be able to modify a file it only had permission to read CVE-2026-43741: Messages https://apple-cve.com/cve/CVE-2026-43741 2026-09-14T00:00:00Z An app may be able to access protected user data CVE-2026-43737: CoreMotion https://apple-cve.com/cve/CVE-2026-43737 2026-09-14T00:00:00Z An app may be able to access motion data from headphones without user consent CVE-2026-43719: SMB https://apple-cve.com/cve/CVE-2026-43719 2026-09-14T00:00:00Z Mounting a maliciously crafted SMB network share may lead to system termination CVE-2026-43697: SceneKit https://apple-cve.com/cve/CVE-2026-43697 2026-09-14T00:00:00Z Processing a maliciously crafted 3D file may lead to an out-of-bounds read CVE-2026-43696: Touch Bar https://apple-cve.com/cve/CVE-2026-43696 2026-09-14T00:00:00Z An app may be able to capture Touch Bar content without authorization CVE-2026-43695: NetworkExtension https://apple-cve.com/cve/CVE-2026-43695 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-43692: CUPS https://apple-cve.com/cve/CVE-2026-43692 2026-09-14T00:00:00Z A remote user may cause an unexpected app termination or arbitrary code execution CVE-2026-43691: CUPS https://apple-cve.com/cve/CVE-2026-43691 2026-09-14T00:00:00Z An app may be able to gain root privileges CVE-2026-43690: SMB https://apple-cve.com/cve/CVE-2026-43690 2026-09-14T00:00:00Z A local user may be able to read kernel memory CVE-2026-43689: Kernel https://apple-cve.com/cve/CVE-2026-43689 2026-09-14T00:00:00Z A malicious app may be able to gain root privileges CVE-2026-43688: Filters https://apple-cve.com/cve/CVE-2026-43688 2026-09-14T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination CVE-2026-43687: Kernel https://apple-cve.com/cve/CVE-2026-43687 2026-09-14T00:00:00Z Connecting to a malicious NFS server may disclose kernel memory CVE-2026-43686: Kernel https://apple-cve.com/cve/CVE-2026-43686 2026-09-14T00:00:00Z Connecting to a malicious NFS server may lead to kernel memory corruption CVE-2026-43684: Kernel https://apple-cve.com/cve/CVE-2026-43684 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-43683: CoreDrag https://apple-cve.com/cve/CVE-2026-43683 2026-09-14T00:00:00Z An app may be able to cause unexpected process termination or disclose process memory CVE-2026-43677: WebDAV https://apple-cve.com/cve/CVE-2026-43677 2026-09-14T00:00:00Z Connecting to a malicious WebDAV server may lead to unexpected app termination CVE-2026-43674: Wi-Fi3 https://apple-cve.com/cve/CVE-2026-43674 2026-09-14T00:00:00Z An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication CVE-2026-43664: Accessibility https://apple-cve.com/cve/CVE-2026-43664 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-34979: CUPS https://apple-cve.com/cve/CVE-2026-34979 2026-09-14T00:00:00Z An attacker in a privileged network position may be able to cause a denial-of-service CVE-2026-28968: Kernel https://apple-cve.com/cve/CVE-2026-28968 2026-09-14T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-28966: RealityKit https://apple-cve.com/cve/CVE-2026-28966 2026-09-14T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination CVE-2026-28937: Terminal https://apple-cve.com/cve/CVE-2026-28937 2026-09-14T00:00:00Z An app may be able to access sensitive user data CVE-2026-28934: HFS https://apple-cve.com/cve/CVE-2026-28934 2026-09-14T00:00:00Z Mounting a malicious disk image may cause unexpected system termination CVE-2026-20683: Apple Account https://apple-cve.com/cve/CVE-2026-20683 2026-09-14T00:00:00Z An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account CVE-2026-65391: WebRTC https://apple-cve.com/cve/CVE-2026-65391 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to memory corruption CVE-2026-65390: WebRTC https://apple-cve.com/cve/CVE-2026-65390 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to memory corruption CVE-2026-65355: Authentication Services https://apple-cve.com/cve/CVE-2026-65355 2026-08-17T00:00:00Z A website may be able to determine a user's IP address with Private Relay turned on CVE-2026-65352: WebKit https://apple-cve.com/cve/CVE-2026-65352 2026-08-17T00:00:00Z A website may be able to determine a user's IP address with Private Relay turned on CVE-2026-65351: WebKit https://apple-cve.com/cve/CVE-2026-65351 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65349: Kernel https://apple-cve.com/cve/CVE-2026-65349 2026-08-17T00:00:00Z An app may be able to cause unexpected system termination or read kernel memory CVE-2026-65347: ImageIO https://apple-cve.com/cve/CVE-2026-65347 2026-08-17T00:00:00Z Processing an image may lead to a denial-of-service CVE-2026-65346: ImageIO https://apple-cve.com/cve/CVE-2026-65346 2026-08-17T00:00:00Z Processing an image may lead to arbitrary code execution CVE-2026-65343: Kernel https://apple-cve.com/cve/CVE-2026-65343 2026-08-17T00:00:00Z A remote attacker may be able to cause unexpected system termination CVE-2026-65341: WebKit https://apple-cve.com/cve/CVE-2026-65341 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to memory corruption CVE-2026-65340: WebKit https://apple-cve.com/cve/CVE-2026-65340 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65339: Audio https://apple-cve.com/cve/CVE-2026-65339 2026-08-17T00:00:00Z An app may be able to leak sensitive user information CVE-2026-65338: WebKit https://apple-cve.com/cve/CVE-2026-65338 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65337: WebKit https://apple-cve.com/cve/CVE-2026-65337 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65336: WebKit https://apple-cve.com/cve/CVE-2026-65336 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65335: WebKit https://apple-cve.com/cve/CVE-2026-65335 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65334: WebKit https://apple-cve.com/cve/CVE-2026-65334 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65333: WebKit https://apple-cve.com/cve/CVE-2026-65333 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65332: WebKit https://apple-cve.com/cve/CVE-2026-65332 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65331: WebKit https://apple-cve.com/cve/CVE-2026-65331 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-65330: Kernel https://apple-cve.com/cve/CVE-2026-65330 2026-08-17T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-65329: Telephony https://apple-cve.com/cve/CVE-2026-65329 2026-08-17T00:00:00Z An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic CVE-2026-64788: IOGPUFamily https://apple-cve.com/cve/CVE-2026-64788 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to memory corruption CVE-2026-64787: WebKit https://apple-cve.com/cve/CVE-2026-64787 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected process termination CVE-2026-64784: WebKit https://apple-cve.com/cve/CVE-2026-64784 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64782: WebKit https://apple-cve.com/cve/CVE-2026-64782 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64781: WebKit https://apple-cve.com/cve/CVE-2026-64781 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64780: WebKit https://apple-cve.com/cve/CVE-2026-64780 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64779: WebKit Storage https://apple-cve.com/cve/CVE-2026-64779 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64778: WebKit History https://apple-cve.com/cve/CVE-2026-64778 2026-08-17T00:00:00Z Visiting a maliciously crafted website may leak sensitive data CVE-2026-64760: IOSurfaceAccelerator https://apple-cve.com/cve/CVE-2026-64760 2026-08-17T00:00:00Z An app may be able to leak sensitive kernel state CVE-2026-64736: IOMobileFrameBuffer https://apple-cve.com/cve/CVE-2026-64736 2026-08-17T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-64715: WebKit https://apple-cve.com/cve/CVE-2026-64715 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected process crash CVE-2026-43795: WebKit https://apple-cve.com/cve/CVE-2026-43795 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-43794: WebKit https://apple-cve.com/cve/CVE-2026-43794 2026-08-17T00:00:00Z Processing maliciously crafted web content may lead to memory corruption CVE-2026-28960: Messages https://apple-cve.com/cve/CVE-2026-28960 2026-08-17T00:00:00Z A remote attacker may be able to cause a denial-of-service CVE-2026-28935: Kernel https://apple-cve.com/cve/CVE-2026-28935 2026-08-17T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-65400: Screen Sharing https://apple-cve.com/cve/CVE-2026-65400 2026-08-06T00:00:00Z An attacker on the network may be able to authenticate to Screen Sharing without valid credentials CVE-2026-86902: NSDocument https://apple-cve.com/cve/CVE-2026-86902 2026-07-27T00:00:00Z An app may be able to access sensitive user data CVE-2026-84562: Virtualization https://apple-cve.com/cve/CVE-2026-84562 2026-07-27T00:00:00Z An app may be able to access protected user data CVE-2026-84489: CoreUI https://apple-cve.com/cve/CVE-2026-84489 2026-07-27T00:00:00Z An app may be able to cause a denial of service CVE-2026-65407: AppleAVD https://apple-cve.com/cve/CVE-2026-65407 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65404: Accounts https://apple-cve.com/cve/CVE-2026-65404 2026-07-27T00:00:00Z A malicious application may be able to bypass Privacy preferences CVE-2026-65375: WebDAV https://apple-cve.com/cve/CVE-2026-65375 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-65371: Kernel https://apple-cve.com/cve/CVE-2026-65371 2026-07-27T00:00:00Z An app may be able to disclose kernel memory CVE-2026-65357: Kernel https://apple-cve.com/cve/CVE-2026-65357 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination or write kernel memory CVE-2026-65353: Apple Account https://apple-cve.com/cve/CVE-2026-65353 2026-07-27T00:00:00Z An app may be able to access sensitive user data CVE-2026-64783: WebKit https://apple-cve.com/cve/CVE-2026-64783 2026-07-27T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64776: Disk Images https://apple-cve.com/cve/CVE-2026-64776 2026-07-27T00:00:00Z An app may be able to disclose kernel memory CVE-2026-64775: Kernel https://apple-cve.com/cve/CVE-2026-64775 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-64774: Model I/O https://apple-cve.com/cve/CVE-2026-64774 2026-07-27T00:00:00Z A remote attacker may be able to cause unexpected application termination or heap corruption CVE-2026-64772: Model I/O https://apple-cve.com/cve/CVE-2026-64772 2026-07-27T00:00:00Z A remote attacker may be able to cause unexpected application termination or heap corruption CVE-2026-64771: Model I/O https://apple-cve.com/cve/CVE-2026-64771 2026-07-27T00:00:00Z A remote attacker may be able to cause unexpected application termination or heap corruption CVE-2026-64770: Model I/O https://apple-cve.com/cve/CVE-2026-64770 2026-07-27T00:00:00Z A remote attacker may be able to cause unexpected application termination or heap corruption CVE-2026-64769: Model I/O https://apple-cve.com/cve/CVE-2026-64769 2026-07-27T00:00:00Z A remote attacker may be able to cause unexpected application termination or heap corruption CVE-2026-64768: Model I/O https://apple-cve.com/cve/CVE-2026-64768 2026-07-27T00:00:00Z A remote attacker may cause an unexpected app termination CVE-2026-64767: afpfs https://apple-cve.com/cve/CVE-2026-64767 2026-07-27T00:00:00Z A remote attacker may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-64766: SceneKit https://apple-cve.com/cve/CVE-2026-64766 2026-07-27T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution CVE-2026-64765: SceneKit https://apple-cve.com/cve/CVE-2026-64765 2026-07-27T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution CVE-2026-64764: SceneKit https://apple-cve.com/cve/CVE-2026-64764 2026-07-27T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution CVE-2026-64763: SceneKit https://apple-cve.com/cve/CVE-2026-64763 2026-07-27T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution CVE-2026-64762: AVEVideoEncoder https://apple-cve.com/cve/CVE-2026-64762 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination CVE-2026-64758: ImageIO https://apple-cve.com/cve/CVE-2026-64758 2026-07-27T00:00:00Z Processing a maliciously crafted file may lead to unexpected app termination CVE-2026-64757: WebKit https://apple-cve.com/cve/CVE-2026-64757 2026-07-27T00:00:00Z Processing maliciously crafted web content may lead to an unexpected Safari crash CVE-2026-64755: WorkoutKit https://apple-cve.com/cve/CVE-2026-64755 2026-07-27T00:00:00Z An app may be able to access sensitive user data CVE-2026-64754: ImageIO https://apple-cve.com/cve/CVE-2026-64754 2026-07-27T00:00:00Z Processing a maliciously crafted file may lead to a denial-of-service CVE-2026-64751: Kernel https://apple-cve.com/cve/CVE-2026-64751 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination or write kernel memory CVE-2026-64749: Kernel https://apple-cve.com/cve/CVE-2026-64749 2026-07-27T00:00:00Z An app may be able to cause unexpected system termination or corrupt kernel memory CVE-2026-64747: AVEVideoEncoder https://apple-cve.com/cve/CVE-2026-64747 2026-07-27T00:00:00Z An app may be able to execute arbitrary code with kernel privileges CVE-2026-64746: Contacts https://apple-cve.com/cve/CVE-2026-64746 2026-07-27T00:00:00Z An app may be able to add contacts without user authorization CVE-2026-64745: Siri https://apple-cve.com/cve/CVE-2026-64745 2026-07-27T00:00:00Z A person with physical access to a locked device may be able to access contacts and photos CVE-2026-64744: Kernel https://apple-cve.com/cve/CVE-2026-64744 2026-07-27T00:00:00Z An app may be able to disclose kernel memory CVE-2026-64743: Managed Configuration https://apple-cve.com/cve/CVE-2026-64743 2026-07-27T00:00:00Z An app may be able to access sensitive user data CVE-2026-64742: FrontBoard https://apple-cve.com/cve/CVE-2026-64742 2026-07-27T00:00:00Z An app may be able to access sensitive user data CVE-2026-64741: Sandbox Profiles https://apple-cve.com/cve/CVE-2026-64741 2026-07-27T00:00:00Z An app may be able to read a persistent device identifier CVE-2026-64740: Game Center https://apple-cve.com/cve/CVE-2026-64740 2026-07-27T00:00:00Z A malicious app may be able to break out of its sandbox CVE-2026-64739: Libnotify https://apple-cve.com/cve/CVE-2026-64739 2026-07-27T00:00:00Z An attacker may be able to cause unexpected app termination CVE-2026-64738: Maps https://apple-cve.com/cve/CVE-2026-64738 2026-07-27T00:00:00Z A malicious app may be able to break out of its sandbox CVE-2026-64737: Apple Account https://apple-cve.com/cve/CVE-2026-64737 2026-07-27T00:00:00Z A malicious app may be able to break out of its sandbox CVE-2026-64735: Kernel https://apple-cve.com/cve/CVE-2026-64735 2026-07-27T00:00:00Z A remote attacker may be able to bypass network filters CVE-2026-64734: Contacts https://apple-cve.com/cve/CVE-2026-64734 2026-07-27T00:00:00Z Processing a maliciously crafted contact may leak sensitive data CVE-2026-64733: Accounts Framework https://apple-cve.com/cve/CVE-2026-64733 2026-07-27T00:00:00Z An app may be able to fingerprint the user