{"id":"CVE-2026-28938","kind":"vulnerability","aliases":["CVE-2026-28938"],"related":[],"title":"A privacy issue was addressed by moving sensitive data","description":"About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support\n\n# About the security content of iOS 26.6 and iPadOS 26.6\n\nThis document describes the security content of iOS 26.6 and iPadOS 26.6.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 26.6 and iPadOS 26.6\n\nReleased July 27, 2026\n\n### Accessibility\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64732: Jorge Welch (@jorgwelch)\n\n### Accounts Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)\n\n### App Store\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### Apple Account\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65353: 章鱼哥@aipyaipy.com, Chris Bailey - Short Circuit, N.M.Praveen Nawarathne (@zblockrat), Stuart Wallace\n\nEntry added September 14, 2026\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28928: Dun\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43748: Vladislav Shevchenko (Positive Technologies), an anonymous researcher, tamdao, Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### AppleAVD\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### AppleDouble\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic, Rishabh Jain (rjcyber) of cyberplanet\n\nEntry updated September 14, 2026\n\n### Audio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### AuthKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43730: David Strnadel\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### BackgroundAssets\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to delete files for which it does not have permission\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\n### Books\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A race condition was addressed with improved checks.\n\nCVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\n### CloudAttestation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A maliciously crafted app may be able to bypass code signing enforcement\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43813: Anton Pakhunov\n\n### Contacts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to add contacts without user authorization\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel Febrero\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted contact may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-64734: Daniel Williams\n\n### Contacts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access information about a user's contacts\n\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\nEntry updated September 14, 2026\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreMedia Video Toolbox\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nEntry added September 14, 2026\n\n### curl\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Authentication credentials may be sent to a server on another origin\n\n### DriverKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with physical access to a locked device may be able to view sensitive user information\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43753: Niels Hofmans\n\n### Foundation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to access protected user data\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43714: an anonymous researcher\n\n### FrontBoard\n\nAvailable for: iPhone 11 and later, iPad P","summary":"Apple's iOS 26.6 and iPadOS 26.6 advisory lists many fixes, but the text provided does not include an entry for CVE-2026-28938. What this flaw lets an attacker do is unknown from these sources.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"apple ipados","fixed":["26.6"],"affected":"< 26.6","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["26.6"],"affected":"< 26.6","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","infrastructure","ios","ipad","ipados","iphone","vendor-advisory"],"not_affected_if":[],"how_to_check":"- Check the version under Settings > General > About: `iOS 26.6` or `iPadOS 26.6` or later\n- Confirm the CVE entry on Apple's advisory page: https://support.apple.com/en-us/128066","fix":null,"status":"open","published_at":"2026-09-14T21:17:05+00:00","first_seen_at":"2026-11-13T20:39:12+00:00","triaged_at":"2026-11-13T20:39:29+00:00","updated_at":"2026-11-13T21:27:25+00:00","category":"infrastructure","confidence":0.2,"triage":{"at":"2026-11-13T20:39:29Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Apple iOS 26.6 and iPadOS 26.6 security release, flaw details unlisted","impact":"medium","summary":"Apple's iOS 26.6 and iPadOS 26.6 advisory lists many fixes, but the text provided does not include an entry for CVE-2026-28938. What this flaw lets an attacker do is unknown from these sources.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["iphone","ipad","ios","ipados"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Unknown; the excerpt does not describe this CVE","analyst_note":"Find the CVE-2026-28938 entry and its impact on https://support.apple.com/en-us/128066; the provided text does not contain it.","how_to_check":"- Check the version under Settings > General > About: `iOS 26.6` or `iPadOS 26.6` or later\n- Confirm the CVE entry on Apple's advisory page: https://support.apple.com/en-us/128066","plain_action":"Install iOS 26.6 or iPadOS 26.6 on your iPhone or iPad.","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown. The advisory covers iPhone 11 and later and recent iPad models, but the provided text does not include an entry for CVE-2026-28938, so its exposure cannot be confirmed from these sources.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.002005,"input_tokens":9144,"output_tokens":2182,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A,52B,203C,270C,342C,410C,495C,567C,652C '-28928':496C '-28938':12A,15A,53B '-43748':568C '-43801':343C '-64732':204C '-64733':271C '-65353':411C '-65407':653C '11':173C,213C,226C,285C,298C,351C,364C,434C,447C,504C,517C,591C,604C,668C,681C '12.9':218C,290C,356C,439C,509C,596C,673C '14':426C,585C,662C '1st':228C,300C,366C,449C,519C,606C,683C '2026':168C,427C,586C,663C '26.6':33B,36B,72C,75C,84C,87C,96C,99C,161C,164C '27':167C '3rd':220C,234C,292C,306C,358C,372C,441C,455C,511C,525C,598C,612C,675C,689C '5th':246C,318C,384C,467C,537C,624C '8th':239C,311C,377C,460C,530C,617C 'abl':184C,255C,327C,393C,476C,546C,633C 'access':169C,181C,186C,329C,395C 'account':208C,347C 'add':424C,583C,660C 'address':5A,197C,264C,337C,404C,489C,561C,646C 'advisori':29B,37B 'aipyaipy.com':413C 'air':233C,305C,371C,454C,524C,611C,688C 'anonym':574C 'app':252C,280C,324C,390C,473C,543C,630C 'appl':21B,30B,76C,101C,108C,134C,138C,156C,346C,428C,498C 'apple':16A,18A 'appleavd':587C 'appledoubl':664C 'attack':59B,178C 'author':401C 'avail':127C,170C,210C,282C,348C,431C,501C,588C,665C 'bailey':415C 'belman':578C,655C 'blackw':580C,657C 'bound':557C,564C 'caus':478C,548C,635C 'check':340C,565C 'chris':414C 'circuit':417C 'confirm':114C 'content':69C,81C,93C 'custom':106C 'cve':10A,13A,51B,145C,202C,269C,341C,409C,494C,566C,651C 'cve-id':144C 'data':9A,189C,267C,332C,398C 'describ':90C 'descript':193C,260C,333C,399C,482C,552C,639C 'disclos':111C 'discuss':112C 'document':89C,140C 'doesn':109C 'dun':497C 'engin':430C,500C 'entri':49B,423C,582C,659C 'fingerprint':257C 'fix':40B 'flaw':56B 'framework':209C 'franco':577C,654C 'free':486C,643C 'generat':221C,229C,235C,240C,247C,293C,301C,307C,312C,319C,359C,367C,373C,378C,385C,442C,450C,456C,461C,468C,512C,520C,526C,531C,538C,599C,607C,613C,618C,625C,676C,684C,690C 'id':146C 'impact':176C,250C,322C,388C,471C,541C,628C 'improv':199C,266C,339C,406C,491C,563C,648C 'inch':219C,227C,291C,299C,357C,365C,440C,448C,510C,518C,597C,605C,674C,682C 'includ':47B 'inform':151C 'infrastructur':22B 'intellig':581C,658C 'investig':119C 'io':23B,32B,71C,83C,95C,160C 'ipad':24B,216C,224C,232C,238C,244C,288C,296C,304C,310C,316C,354C,362C,370C,376C,382C,437C,445C,453C,459C,465C,507C,515C,523C,529C,535C,594C,602C,610C,616C,622C,671C,679C,687C 'ipado':25B,35B,74C,86C,98C,163C 'ipados':17A 'iphon':26B,172C,191C,212C,284C,350C,433C,503C,590C,667C 'iphone':19A 'issu':3A,116C,195C,262C,335C,402C,487C,559C,644C 'jorg':205C 'jorgwelch':207C 'juli':166C 'keller':273C 'later':175C,215C,223C,231C,237C,242C,249C,287C,295C,303C,309C,314C,321C,353C,361C,369C,375C,380C,387C,436C,444C,452C,458C,463C,470C,506C,514C,522C,528C,533C,540C,593C,601C,609C,615C,620C,627C,670C,678C,686C 'let':57B 'list':38B,131C 'malici':277C 'manag':201C,408C,493C,650C 'mani':39B 'may':182C,253C,325C,391C,474C,544C,631C 'memori':492C,649C 'mini':245C,317C,383C,466C,536C,623C 'mirror':192C 'move':7A 'n.m.praveen':418C 'nawarathn':419C 'neural':429C,499C 'occur':121C 'os':20A 'out-of-bound':554C 'page':137C,159C 'paradisefacade.com':279C 'patch':123C 'physic':180C 'posit':571C 'possibl':148C 'privaci':2A 'pro':217C,225C,289C,297C,355C,363C,438C,446C,508C,516C,595C,603C,672C,680C 'product':157C 'protect':107C,268C 'provid':44B 'rahul':344C 'raj':345C 'recent':128C 'refer':141C 'releas':125C,129C,136C,165C 'research':575C 'rosyna':272C 'secur':68C,80C,92C,102C,115C,135C,139C,153C,158C 'see':154C 'sensit':8A,187C,330C,396C 'septemb':425C,584C,661C 'shevchenko':570C 'short':416C 'softwar':278C 'sourc':65B 'state':200C,407C 'store':281C 'stuart':421C 'support':77C 'system':480C,550C,637C 'tamdao':576C 'technolog':572C 'termin':481C,551C,638C 'text':43B 'total':275C 'unexpect':479C,549C,636C 'unknown':62B 'updat':103C 'use':484C,641C 'user':188C,259C,331C,397C 'vendor':28B 'vendor-advisori':27B 'vladislav':569C 'vulner':142C 'wallac':422C 'welch':206C 'write':558C 'zblockrat':420C '章鱼哥':412C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":"Install iOS 26.6 or iPadOS 26.6 on your iPhone or iPad.","pkeys":["appleipados","appleiphoneos","ipados","iphoneos"],"ptokens":["apple","ipados","iphone","os"],"labels":["apple","high","infrastructure","ios","ipad","ipados","iphone","vendor","vendoradvisory"],"campaign_type":null,"search_a":"'-2026':11A,14A '-28938':12A,15A 'address':5A 'apple':16A,18A 'cve':10A,13A 'data':9A 'ipados':17A 'iphone':19A 'issu':3A 'move':7A 'os':20A 'privaci':2A 'sensit':8A","search_b":"'-2026':52B '-28938':53B '26.6':33B,36B 'advisori':29B,37B 'appl':21B,30B 'attack':59B 'cve':51B 'entri':49B 'fix':40B 'flaw':56B 'includ':47B 'infrastructur':22B 'io':23B,32B 'ipad':24B 'ipado':25B,35B 'iphon':26B 'let':57B 'list':38B 'mani':39B 'provid':44B 'sourc':65B 'text':43B 'unknown':62B 'vendor':28B 'vendor-advisori':27B","search_c":"'-2026':203C,270C,342C,410C,495C,567C,652C '-28928':496C '-43748':568C '-43801':343C '-64732':204C '-64733':271C '-65353':411C '-65407':653C '11':173C,213C,226C,285C,298C,351C,364C,434C,447C,504C,517C,591C,604C,668C,681C '12.9':218C,290C,356C,439C,509C,596C,673C '14':426C,585C,662C '1st':228C,300C,366C,449C,519C,606C,683C '2026':168C,427C,586C,663C '26.6':72C,75C,84C,87C,96C,99C,161C,164C '27':167C '3rd':220C,234C,292C,306C,358C,372C,441C,455C,511C,525C,598C,612C,675C,689C '5th':246C,318C,384C,467C,537C,624C '8th':239C,311C,377C,460C,530C,617C 'abl':184C,255C,327C,393C,476C,546C,633C 'access':169C,181C,186C,329C,395C 'account':208C,347C 'add':424C,583C,660C 'address':197C,264C,337C,404C,489C,561C,646C 'aipyaipy.com':413C 'air':233C,305C,371C,454C,524C,611C,688C 'anonym':574C 'app':252C,280C,324C,390C,473C,543C,630C 'appl':76C,101C,108C,134C,138C,156C,346C,428C,498C 'appleavd':587C 'appledoubl':664C 'attack':178C 'author':401C 'avail':127C,170C,210C,282C,348C,431C,501C,588C,665C 'bailey':415C 'belman':578C,655C 'blackw':580C,657C 'bound':557C,564C 'caus':478C,548C,635C 'check':340C,565C 'chris':414C 'circuit':417C 'confirm':114C 'content':69C,81C,93C 'custom':106C 'cve':145C,202C,269C,341C,409C,494C,566C,651C 'cve-id':144C 'data':189C,267C,332C,398C 'describ':90C 'descript':193C,260C,333C,399C,482C,552C,639C 'disclos':111C 'discuss':112C 'document':89C,140C 'doesn':109C 'dun':497C 'engin':430C,500C 'entri':423C,582C,659C 'fingerprint':257C 'framework':209C 'franco':577C,654C 'free':486C,643C 'generat':221C,229C,235C,240C,247C,293C,301C,307C,312C,319C,359C,367C,373C,378C,385C,442C,450C,456C,461C,468C,512C,520C,526C,531C,538C,599C,607C,613C,618C,625C,676C,684C,690C 'id':146C 'impact':176C,250C,322C,388C,471C,541C,628C 'improv':199C,266C,339C,406C,491C,563C,648C 'inch':219C,227C,291C,299C,357C,365C,440C,448C,510C,518C,597C,605C,674C,682C 'inform':151C 'intellig':581C,658C 'investig':119C 'io':71C,83C,95C,160C 'ipad':216C,224C,232C,238C,244C,288C,296C,304C,310C,316C,354C,362C,370C,376C,382C,437C,445C,453C,459C,465C,507C,515C,523C,529C,535C,594C,602C,610C,616C,622C,671C,679C,687C 'ipado':74C,86C,98C,163C 'iphon':172C,191C,212C,284C,350C,433C,503C,590C,667C 'issu':116C,195C,262C,335C,402C,487C,559C,644C 'jorg':205C 'jorgwelch':207C 'juli':166C 'keller':273C 'later':175C,215C,223C,231C,237C,242C,249C,287C,295C,303C,309C,314C,321C,353C,361C,369C,375C,380C,387C,436C,444C,452C,458C,463C,470C,506C,514C,522C,528C,533C,540C,593C,601C,609C,615C,620C,627C,670C,678C,686C 'list':131C 'malici':277C 'manag':201C,408C,493C,650C 'may':182C,253C,325C,391C,474C,544C,631C 'memori':492C,649C 'mini':245C,317C,383C,466C,536C,623C 'mirror':192C 'n.m.praveen':418C 'nawarathn':419C 'neural':429C,499C 'occur':121C 'out-of-bound':554C 'page':137C,159C 'paradisefacade.com':279C 'patch':123C 'physic':180C 'posit':571C 'possibl':148C 'pro':217C,225C,289C,297C,355C,363C,438C,446C,508C,516C,595C,603C,672C,680C 'product':157C 'protect':107C,268C 'rahul':344C 'raj':345C 'recent':128C 'refer':141C 'releas':125C,129C,136C,165C 'research':575C 'rosyna':272C 'secur':68C,80C,92C,102C,115C,135C,139C,153C,158C 'see':154C 'sensit':187C,330C,396C 'septemb':425C,584C,661C 'shevchenko':570C 'short':416C 'softwar':278C 'state':200C,407C 'store':281C 'stuart':421C 'support':77C 'system':480C,550C,637C 'tamdao':576C 'technolog':572C 'termin':481C,551C,638C 'total':275C 'unexpect':479C,549C,636C 'updat':103C 'use':484C,641C 'user':188C,259C,331C,397C 'vladislav':569C 'vulner':142C 'wallac':422C 'welch':206C 'write':558C 'zblockrat':420C '章鱼哥':412C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-09-14T21:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/128066#CVE-2026-28938","url":"https://support.apple.com/en-us/128066","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-13T20:39:12+00:00","fetched_at":"2026-11-13T20:39:12+00:00","note":"Apple: About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-28938","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28938","severity":null,"published_at":"2026-09-14T21:17:05+00:00","modified_at":"2026-09-17T18:41:26+00:00","first_seen_at":"2026-11-13T21:27:25+00:00","fetched_at":"2026-11-13T21:27:25+00:00","note":null}],"documents":[{"id":62496,"url":"https://support.apple.com/en-us/128066","title":"Apple: About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support\n\n# About the security content of iOS 26.6 and iPadOS 26.6\n\nThis document describes the security content of iOS 26.6 and iPadOS 26.6.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 26.6 and iPadOS 26.6\n\nReleased July 27, 2026\n\n### Accessibility\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64732: Jorge Welch (@jorgwelch)\n\n### Accounts Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)\n\n### App Store\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### Apple Account\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65353: 章鱼哥@aipyaipy.com, Chris Bailey - Short Circuit, N.M.Praveen Nawarathne (@zblockrat), Stuart Wallace\n\nEntry added September 14, 2026\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28928: Dun\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43748: Vladislav Shevchenko (Positive Technologies), an anonymous researcher, tamdao, Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### AppleAVD\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### AppleDouble\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic, Rishabh Jain (rjcyber) of cyberplanet\n\nEntry updated September 14, 2026\n\n### Audio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### AuthKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43730: David Strnadel\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### BackgroundAssets\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to delete files for which it does not have permission\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\n### Books\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A race condition was addressed with improved checks.\n\nCVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\n### CloudAttestation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A maliciously crafted app may be able to bypass code signing enforcement\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43813: Anton Pakhunov\n\n### Contacts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to add contacts without user authorization\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel Febrero\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted contact may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-64734: Daniel Williams\n\n### Contacts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access information about a user's contacts\n\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\nEntry updated September 14, 2026\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreMedia Video Toolbox\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nEntry added September 14, 2026\n\n### curl\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Authentication credentials may be sent to a server on another origin\n\n### DriverKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with physical access to a locked device may be able to view sensitive user information\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43753: Niels Hofmans\n\n### Foundation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to access protected user data\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43714: an anonymous researcher\n\n### FrontBoard\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed by using HTTPS when sending information over the network.\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav Jelezoglo\n\n### Heimdal\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64692: Redon Gashi\n\n### HFS\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-64705: Surya Kushwaha, Peter Malone, Dave G.\n\nEntry added September 14, 2026\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted texture may lead to unexpected app termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43818: an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\nCVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64754: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### IOKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-43805: 이재영\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64749: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar, Hiroki Imai (LAC Co., Ltd.), hxr1\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Feng Xue and XGPT of ThreatBook, Mahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki Imai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), Fábio Luís @scanpt, Nicolas Rabrenovic\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to bypass network filters\n\nDescription: An inconsistent user interface issue was addressed with improved state management.\n\nCVE-2026-64735: Gor Aleksanyan\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov, jay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from Appknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl) with UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66) with UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The Hxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal Kosiorek\n\nCVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, 재영 정, @rootxran (Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous researcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at Blackwing Intelligence, Christian Figueroa, Johnny Franks (@0xjohnny), Ashmit Sharma & Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin Bhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis Haatainen, Huy Nguyen (@34306) of Calif.io\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek\n\nCVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doupé of ASU SEFCOM, Dun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Johnny Franks (@0xjohnny)\n\nCVE-2026-43814: Somair Ansar, Huy Nguyen (@34306) of Calif.io\n\nCVE-2026-64700: Asjid Kalam (@odinshell)\n\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28931: Redon Gashi, Abhijeet Singh (linkedin.com/in/abhiunix/), Peter Malone, Omar Cerrito\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43817: Huy Nguyen (@34306) of Calif.io\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-64775: Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64720: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., an anonymous researcher, Asjid Kalam (@odinshell), Jian Zhou and Ye Zhang\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64721: Lukas Gerlach\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65357: YingMuo (@YingMuo) of DEVCORE Research Team, Tristan Rousseau, James Duffy (@0x4A616D657344)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed with improved redaction of sensitive information.\n\nCVE-2026-65371: Vladislav Shevchenko (Positive Technologies)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43808: Dun, deepsec of DARKNAVY (@DarkNavyOrg)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry added September 14, 2026\n\n### libarchive\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### libc\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-28973: an anonymous researcher\n\n### Libnotify\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker may be able to cause unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun\n\n### Managed Configuration\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-64743: Daniel Febrero\n\n### mDNSResponder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker on the local network may be able to cause a denial-of-service\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)\n\n### MediaRemote\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to gain root privileges\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43733: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\nCVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved input validation.\n\nCVE-2026-64772: stratan (@5tratan), wh0am1i\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a 3D model may result in disclosure of process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64774: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64770: stratan (@5tratan)\n\nCVE-2026-64769: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may cause an unexpected app termination\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-64768: stratan (@5tratan)\n\n### NSColorPanel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to leak sensitive user information\n\nCVE-2026-64711: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.\n\n### Pro Res\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43812: Francisco Knabe\n\n### Sandbox Profiles\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to read a persistent device identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64766: stratan (@5tratan)\n\nCVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)\n\nEntry updated September 14, 2026\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64764: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-64763: stratan (@5tratan)\n\n### Single Sign-On\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-43762: RedRays Security Team\n\nEntry added September 14, 2026\n\n### Siri\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An information disclosure issue was addressed by removing the vulnerable code.\n\nCVE-2026-43800: Stanislav Jelezoglo\n\n### Watch App\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A privacy issue was addressed by moving sensitive data.\n\nCVE-2026-28938: Morris Richman (@morrisinlife), Asaf Cohen, Gongyu Ma (@Mezone0)\n\nEntry added September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Websites may know if the user has visited a given link\n\nDescription: This issue was addressed with improved checks.\n\nWebKit Bugzilla: 316827\n\nCVE-2026-64713: Kwak Kiyong, Song Nuri\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Visiting a website that frames malicious content may lead to UI spoofing\n\nDescription: The issue was addressed with improved UI.\n\nWebKit Bugzilla: 311660\n\nCVE-2026-64730: Kagami Rosylight of Mozilla\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Maliciously crafted web content may violate iframe sandboxing policy\n\nDescription: A permissions issue was addressed with improved validation.\n\nWebKit Bugzilla: 313220\n\nCVE-2026-64728: an anonymous researcher \n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313521\n\nCVE-2026-64783: Luke Francis, Francisco Alonso (@revskills), Shubham Chaskar, Jiyong Yang (@Sy2n0), 杉山 壮太, lattice, Behzad Najjarpour Jabbari (@_G4ru_), Junyeong Lee, Mooth.ai, OGINOME Tomohito, Using GLM From Z.AI, Gia Bui (@yabeow) from Calif.io\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and la","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":62496,"url":"https://support.apple.com/en-us/128066","title":"Apple: About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of iOS 26.6 and iPadOS 26.6 - Apple Support\n\n# About the security content of iOS 26.6 and iPadOS 26.6\n\nThis document describes the security content of iOS 26.6 and iPadOS 26.6.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 26.6 and iPadOS 26.6\n\nReleased July 27, 2026\n\n### Accessibility\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64732: Jorge Welch (@jorgwelch)\n\n### Accounts Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-64733: Rosyna Keller of Totally Not Malicious Software (paradisefacade.com)\n\n### App Store\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### Apple Account\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65353: 章鱼哥@aipyaipy.com, Chris Bailey - Short Circuit, N.M.Praveen Nawarathne (@zblockrat), Stuart Wallace\n\nEntry added September 14, 2026\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28928: Dun\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43748: Vladislav Shevchenko (Positive Technologies), an anonymous researcher, tamdao, Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### AppleAVD\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\nEntry added September 14, 2026\n\n### AppleDouble\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43776: Irvin Wang, Peter Malone, Nicolas Rabrenovic, Rishabh Jain (rjcyber) of cyberplanet\n\nEntry updated September 14, 2026\n\n### Audio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### AuthKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43730: David Strnadel\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### BackgroundAssets\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to delete files for which it does not have permission\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\n### Books\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A race condition was addressed with improved checks.\n\nCVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\n### CloudAttestation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A maliciously crafted app may be able to bypass code signing enforcement\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43813: Anton Pakhunov\n\n### Contacts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to add contacts without user authorization\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel Febrero\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted contact may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-64734: Daniel Williams\n\n### Contacts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access information about a user's contacts\n\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\nEntry updated September 14, 2026\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreMedia Video Toolbox\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\nEntry added September 14, 2026\n\n### curl\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Authentication credentials may be sent to a server on another origin\n\n### DriverKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with physical access to a locked device may be able to view sensitive user information\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43753: Niels Hofmans\n\n### Foundation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to access protected user data\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43714: an anonymous researcher\n\n### FrontBoard\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed by using HTTPS when sending information over the network.\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43796: Ilya Andr (andrd3v) of Positive Technologies, Stanislav Jelezoglo\n\n### Heimdal\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64692: Redon Gashi\n\n### HFS\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-64705: Surya Kushwaha, Peter Malone, Dave G.\n\nEntry added September 14, 2026\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted texture may lead to unexpected app termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43780: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43818: an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64716: Arni Hardarson, Jonathan Alush-Aben, Peter Malone\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\nCVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64754: PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### IOKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-43805: 이재영\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64749: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar, Hiroki Imai (LAC Co., Ltd.), hxr1\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Feng Xue and XGPT of ThreatBook, Mahmoud Abdelmoniem, an anonymous researcher, Wang Yu, Lyutoon, Hiroki Imai (LAC Co., Ltd.), DARKNAVY (@DarkNavyOrg), Fábio Luís @scanpt, Nicolas Rabrenovic\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to bypass network filters\n\nDescription: An inconsistent user interface issue was addressed with improved state management.\n\nCVE-2026-64735: Gor Aleksanyan\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43739: impost0r (ret2plt), Ruslan Dautov, Aleksandr Tarasikov, jay, Dhiyanesh Selvaraj (@redroot97), Vinay Kumar Rasala (Xplo8E) from Appknox, Lyutoon, DongJun Kim (smlijun) with UIUC, Hwiwon Lee (hwiwonl) with UIUC, Jongseong Kim (nevul37) with UIUC, Younggi Park (grill66) with UIUC, Peter Malone, an anonymous researcher, Hari Shanmugam (The Hxr1), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Marco Grassi, Dun, Daniele Castronovo, Michal Kosiorek\n\nCVE-2026-43816: Josh Maine of Calif.io, Ruslan Dautov, 재영 정, @rootxran (Rao Ali Nawaz), Chanwit Muenprakoddee (ChemIndy), an anonymous researcher, Ye Zhang (@VAR10CK) of Baidu Security, Franco Belman at Blackwing Intelligence, Christian Figueroa, Johnny Franks (@0xjohnny), Ashmit Sharma & Atul RV, Peter Malone, Muhamad Syaiful, Muneeb Amin Bhat, Dhiyanesh Selvaraj (@redroot97), Ali Marzouq, Bountyy Oy - Mihalis Haatainen, Huy Nguyen (@34306) of Calif.io\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43822: Eddy Tsalolikhin, Michal Kosiorek\n\nCVE-2026-64729: Josh Maine of Calif.io, beist, Adam Doupé of ASU SEFCOM, Dun, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Johnny Franks (@0xjohnny)\n\nCVE-2026-43814: Somair Ansar, Huy Nguyen (@34306) of Calif.io\n\nCVE-2026-64700: Asjid Kalam (@odinshell)\n\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28931: Redon Gashi, Abhijeet Singh (linkedin.com/in/abhiunix/), Peter Malone, Omar Cerrito\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43817: Huy Nguyen (@34306) of Calif.io\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-64775: Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64720: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., an anonymous researcher, Asjid Kalam (@odinshell), Jian Zhou and Ye Zhang\n\nEntry updated September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-64751: N.M.Praveen Nawarathne (@zblockrat)\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64721: Lukas Gerlach\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65357: YingMuo (@YingMuo) of DEVCORE Research Team, Tristan Rousseau, James Duffy (@0x4A616D657344)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed with improved redaction of sensitive information.\n\nCVE-2026-65371: Vladislav Shevchenko (Positive Technologies)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43808: Dun, deepsec of DARKNAVY (@DarkNavyOrg)\n\nEntry added September 14, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry added September 14, 2026\n\n### libarchive\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### libc\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-28973: an anonymous researcher\n\n### Libnotify\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker may be able to cause unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun\n\n### Managed Configuration\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-64743: Daniel Febrero\n\n### mDNSResponder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker on the local network may be able to cause a denial-of-service\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)\n\n### MediaRemote\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to gain root privileges\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43733: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\nCVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved input validation.\n\nCVE-2026-64772: stratan (@5tratan), wh0am1i\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a 3D model may result in disclosure of process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64774: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64770: stratan (@5tratan)\n\nCVE-2026-64769: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may cause an unexpected app termination\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-64768: stratan (@5tratan)\n\n### NSColorPanel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to leak sensitive user information\n\nCVE-2026-64711: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.\n\n### Pro Res\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43812: Francisco Knabe\n\n### Sandbox Profiles\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to read a persistent device identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64766: stratan (@5tratan)\n\nCVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)\n\nEntry updated September 14, 2026\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64764: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-64763: stratan (@5tratan)\n\n### Single Sign-On\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-43762: RedRays Security Team\n\nEntry added September 14, 2026\n\n### Siri\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An information disclosure issue was addressed by removing the vulnerable code.\n\nCVE-2026-43800: Stanislav Jelezoglo\n\n### Watch App\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A privacy issue was addressed by moving sensitive data.\n\nCVE-2026-28938: Morris Richman (@morrisinlife), Asaf Cohen, Gongyu Ma (@Mezone0)\n\nEntry added September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Websites may know if the user has visited a given link\n\nDescription: This issue was addressed with improved checks.\n\nWebKit Bugzilla: 316827\n\nCVE-2026-64713: Kwak Kiyong, Song Nuri\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Visiting a website that frames malicious content may lead to UI spoofing\n\nDescription: The issue was addressed with improved UI.\n\nWebKit Bugzilla: 311660\n\nCVE-2026-64730: Kagami Rosylight of Mozilla\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Maliciously crafted web content may violate iframe sandboxing policy\n\nDescription: A permissions issue was addressed with improved validation.\n\nWebKit Bugzilla: 313220\n\nCVE-2026-64728: an anonymous researcher \n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313521\n\nCVE-2026-64783: Luke Francis, Francisco Alonso (@revskills), Shubham Chaskar, Jiyong Yang (@Sy2n0), 杉山 壮太, lattice, Behzad Najjarpour Jabbari (@_G4ru_), Junyeong Lee, Mooth.ai, OGINOME Tomohito, Using GLM From Z.AI, Gia Bui (@yabeow) from Calif.io\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and la","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}