{"id":"CVE-2026-28960","kind":"vulnerability","aliases":["CVE-2026-28960"],"related":[],"title":"A denial-of-service issue was addressed with improved validation","description":"About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support\n\n# About the security content of iOS 18.7.10 and iPadOS 18.7.10\n\nThis update delivers security fixes that were first made available in the iOS 26.6 and 27 and iPadOS 26.6 and 27 betas. This document describes the security content of iOS 18.7.10 and iPadOS 18.7.10.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 18.7.10 and iPadOS 18.7.10\n\nReleased August 17, 2026\n\n### Accessibility\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64732: Jorge Welch (@jorgwelch)\n\n### Accounts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: 이재영, Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, Arni Hardarson (Neonix Security)\n\nEntry added September 14, 2026\n\n### AirDrop\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: A reachable assertion was addressed with improved input validation.\n\nCVE-2026-43667: Arash Ale Ebrahim from SCy-Phy research group of CISPA Helmholtz Center for Information Security\n\n### APFS\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64695: Narendra Singh (@_3P1C), Peter Malone\n\n### App Store\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### AppleDouble\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43776: Peter Malone, Nicolas Rabrenovic, Irvin Wang, Rishabh Jain (rjcyber) of cyberplanet\n\nEntry updated September 14, 2026\n\n### Audio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### Authentication Services\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A website may be able to determine a user's IP address with Private Relay turned on\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-65355: Xint Code\n\nEntry added September 14, 2026\n\n### AVEVideoEncoder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### AVEVideoEncoder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun\n\n### BackgroundAssets\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to delete files for which it does not have permission\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\n### Books\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A race condition was addressed with improved checks.\n\nCVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to add contacts without user authorization\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-64746: Rodolphe Brunetti (@eisw0lf) of Lupus Nova, Daniel Febrero\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted contact may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-64734: Daniel Williams\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access information about a user's contacts\n\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreUI\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\nEntry added September 14, 2026\n\n### CoreVideo\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43802: an anonymous researcher\n\n### curl\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Authentication credentials may be sent to a server on another origin\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### Foundation\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43714: an anonymous researcher\n\n### FrontBoard\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to read a persistent device identifier\n\nCVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive Technologies\n\n### Heimdal\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial-of-service\n\nCVE-2026-64692: Redon Gashi\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nCVE-2026-64716: Peter Malone, Jonathan Alush-Aben, Arni Hardarson\n\nCVE-2026-28990: Jiri Ha, Arni Hardarson\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\nCVE-2026-43661: Gandalf4a of PKU-ICODE, Anton Pakhunov, an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43818: an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A memory corruption issue was addressed with improved bounds checking.\n\nCVE-2026-64714: an anonymous researcher\n\nEntry added September 14, 2026\n\n### IOSkywalkFamily\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-39877: Richard Zana, Dhiyanesh Selvaraj (@redroot97)\n\n### IOSurfaceAccelerator\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nDescription: An information leakage was addressed with additional validation.\n\nCVE-2026-64760: Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence, an anonymous researcher\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64749: hxr1, Hiroki Imai (LAC Co., Ltd.), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to disclose kernel memory\n\nCVE-2026-64744: Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: ","summary":"Apple's iOS 18.7.10 and iPadOS 18.7.10 advisory lists many security fixes, but the text provided does not name CVE-2026-28960 or say what it affects. The attacker capability for this CVE is therefore unknown from these sources.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"apple ipados","fixed":["18.7.10"],"affected":"< 18.7.10","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["18.7.10"],"affected":"< 18.7.10","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","ios","ipad","ipados","iphone","vendor","vendor-advisory"],"not_affected_if":[],"how_to_check":"- Check whether the installed iOS or iPadOS version is `18.7.10` or later\n- Open the advisory at https://support.apple.com/en-us/148287 and search it for CVE-2026-28960","fix":null,"status":"open","published_at":"2026-09-14T21:17:05+00:00","first_seen_at":"2026-11-12T20:57:57+00:00","triaged_at":"2026-11-12T21:00:42+00:00","updated_at":"2026-11-12T21:11:27+00:00","category":"vendor","confidence":0.2,"triage":{"at":"2026-11-12T21:00:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Apple iOS 18.7.10 update: security fixes, this flaw not described","impact":"medium","summary":"Apple's iOS 18.7.10 and iPadOS 18.7.10 advisory lists many security fixes, but the text provided does not name CVE-2026-28960 or say what it affects. The attacker capability for this CVE is therefore unknown from these sources.","audience":"everyone","category":"vendor","nicknames":[],"who_cares":["iphone","ipad","ios","ipados"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Confirm at https://support.apple.com/en-us/148287 whether CVE-2026-28960 is listed and what it affects; the provided text does not name it.","how_to_check":"- Check whether the installed iOS or iPadOS version is `18.7.10` or later\n- Open the advisory at https://support.apple.com/en-us/148287 and search it for CVE-2026-28960\n- unknown","plain_action":"Update your iPhone or iPad to iOS 18.7.10 or iPadOS 18.7.10, released August 17, 2026.","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.001836,"input_tokens":9397,"output_tokens":1792,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A,52B,236C,276C,338C,395C,436C,480C,539C,592C,638C '-28960':14A,17A,53B '-43667':339C '-43776':481C '-43801':437C '-64695':396C '-64725':540C '-64732':237C '-64747':639C '-65355':593C '-65404':277C '/)':547C '14':294C,496C,599C '17':194C '18.7.10':35B,38B,77C,80C,89C,92C,123C,126C,188C,191C '2026':195C,295C,497C,600C '26.6':106C,111C '27':108C,113C '3p1c':399C '7th':207C,252C,307C,367C,414C,451C,509C,560C,612C,656C 'abl':217C,260C,319C,375C,421C,516C,567C,619C,663C 'access':196C,214C,219C,423C 'account':241C 'add':292C,597C 'address':8A,230C,270C,332C,389C,431C,474C,533C,574C,586C,632C,677C 'advisori':31B,39B 'affect':58B 'airdrop':296C 'ale':341C 'altv':543C 'altvi.st':546C 'altvi.st/)':545C 'apf':356C 'app':402C,418C,463C,513C,616C,660C 'appknox':284C 'appl':23B,32B,81C,128C,135C,161C,165C,183C 'apple':18A,20A 'appledoubl':440C 'applic':257C 'arash':340C 'arbitrari':466C,622C 'arni':287C 'assert':330C 'attack':60B,211C,311C 'audio':498C 'august':193C 'authent':548C 'author':267C 'avail':102C,154C,197C,242C,297C,357C,404C,441C,499C,550C,602C,646C 'avevideoencod':601C,645C 'belman':641C 'beta':114C 'blackw':643C 'bound':477C,529C,536C,674C 'buffer':471C,629C 'bypass':262C 'capabl':61B 'caus':321C,377C,518C,665C 'center':352C 'check':434C,478C,537C 'cispa':350C 'code':467C,595C,623C 'confirm':141C 'content':74C,86C,120C 'corrupt':382C 'craft':457C 'custom':133C 'cve':12A,15A,51B,64B,172C,235C,275C,337C,394C,435C,479C,538C,591C,637C 'cve-id':171C 'cyberplanet':492C 'data':222C,426C 'deliv':95C 'denial':3A,324C,521C 'denial-of-servic':2A,323C,520C 'describ':117C 'descript':226C,265C,327C,385C,427C,469C,524C,580C,627C,669C 'determin':569C 'disclos':138C 'disclosur':583C 'discuss':139C 'document':116C,167C 'doesn':136C 'ebrahim':342C 'entri':291C,493C,596C 'execut':468C,621C 'file':458C 'first':100C 'fix':43B,97C 'franco':640C 'generat':208C,253C,308C,368C,415C,452C,510C,561C,613C,657C 'group':348C 'handl':393C 'hardarson':288C 'helmholtz':351C 'id':173C 'impact':209C,254C,309C,369C,416C,453C,511C,562C,614C,658C 'improv':10A,232C,272C,334C,391C,433C,476C,535C,588C,634C 'inform':178C,354C,582C 'input':335C 'intellig':644C 'investig':146C 'io':24B,34B,76C,88C,105C,122C,187C 'ip':573C 'ipad':25B,206C,251C,306C,366C,413C,450C,508C,559C,611C,655C 'ipado':26B,37B,79C,91C,110C,125C,190C 'ipados':19A 'iphon':27B,199C,201C,204C,224C,244C,246C,249C,299C,301C,304C,359C,361C,364C,406C,408C,411C,443C,445C,448C,501C,503C,506C,552C,554C,557C,604C,606C,609C,648C,650C,653C 'iphone':21A 'irvin':486C 'issu':6A,143C,228C,268C,387C,429C,531C,584C 'jain':489C 'jorg':238C 'jorgwelch':240C 'kernel':383C,625C 'kumar':280C 'lead':460C 'list':40B,158C 'made':101C 'malici':256C,456C 'malon':401C,483C 'manag':234C,274C,590C 'mani':41B 'max':203C,248C,303C,363C,410C,447C,505C,556C,608C,652C 'may':215C,258C,317C,373C,419C,459C,514C,565C,617C,661C 'memori':384C,392C 'mirror':225C 'name':50B 'narendra':397C 'neonix':289C 'network':315C 'nicola':484C 'occur':148C 'os':22A 'out-of-bound':526C,671C 'overflow':472C,630C 'page':164C,186C 'park':542C 'patch':150C 'peter':400C,482C 'phi':346C 'physic':213C 'posit':316C 'possibl':175C 'prefer':264C 'privaci':263C 'privat':576C 'privileg':314C,626C 'process':454C 'product':184C 'protect':134C 'provid':47B 'rabrenov':485C 'rahul':438C 'raj':439C 'rasala':281C 'reachabl':329C 'read':675C 'recent':155C 'refer':168C 'relay':577C 'releas':152C,156C,163C,192C 'remot':371C 'research':347C 'rishabh':488C 'rjcyber':490C 'say':55B 'sci':345C 'scy-phi':344C 'secur':42B,73C,85C,96C,119C,129C,142C,162C,166C,180C,185C,290C,355C 'see':181C 'sensit':220C,424C 'seonung':541C 'septemb':293C,495C,598C 'servic':5A,326C,523C,549C 'singh':398C 'size':635C 'sourc':70B 'st':544C 'state':233C,273C,589C 'store':403C 'stuart':285C 'support':82C 'system':379C,667C 'termin':380C,464C,668C 'text':46B 'therefor':66B 'turn':578C 'unexpect':378C,462C,666C 'unknown':67B 'updat':94C,130C,494C 'user':221C,372C,425C,571C 'valid':11A,336C,636C 'vendor':28B,30B 'vendor-advisori':29B 'vinay':279C 'vulner':169C 'wallac':286C 'wang':487C 'websit':564C 'welch':239C 'write':530C 'xint':594C 'xplo8e':282C 'xr':205C,250C,305C,365C,412C,449C,507C,558C,610C,654C 'xs':200C,202C,245C,247C,300C,302C,360C,362C,407C,409C,444C,446C,502C,504C,553C,555C,605C,607C,649C,651C '이재영':278C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":"Update your iPhone or iPad to iOS 18.7.10 or iPadOS 18.7.10, released August 17, 2026.","pkeys":["appleipados","appleiphoneos","ipados","iphoneos"],"ptokens":["apple","ipados","iphone","os"],"labels":["apple","high","ios","ipad","ipados","iphone","vendor","vendoradvisory"],"campaign_type":null,"search_a":"'-2026':13A,16A '-28960':14A,17A 'address':8A 'apple':18A,20A 'cve':12A,15A 'denial':3A 'denial-of-servic':2A 'improv':10A 'ipados':19A 'iphone':21A 'issu':6A 'os':22A 'servic':5A 'valid':11A","search_b":"'-2026':52B '-28960':53B '18.7.10':35B,38B 'advisori':31B,39B 'affect':58B 'appl':23B,32B 'attack':60B 'capabl':61B 'cve':51B,64B 'fix':43B 'io':24B,34B 'ipad':25B 'ipado':26B,37B 'iphon':27B 'list':40B 'mani':41B 'name':50B 'provid':47B 'say':55B 'secur':42B 'sourc':70B 'text':46B 'therefor':66B 'unknown':67B 'vendor':28B,30B 'vendor-advisori':29B","search_c":"'-2026':236C,276C,338C,395C,436C,480C,539C,592C,638C '-43667':339C '-43776':481C '-43801':437C '-64695':396C '-64725':540C '-64732':237C '-64747':639C '-65355':593C '-65404':277C '/)':547C '14':294C,496C,599C '17':194C '18.7.10':77C,80C,89C,92C,123C,126C,188C,191C '2026':195C,295C,497C,600C '26.6':106C,111C '27':108C,113C '3p1c':399C '7th':207C,252C,307C,367C,414C,451C,509C,560C,612C,656C 'abl':217C,260C,319C,375C,421C,516C,567C,619C,663C 'access':196C,214C,219C,423C 'account':241C 'add':292C,597C 'address':230C,270C,332C,389C,431C,474C,533C,574C,586C,632C,677C 'airdrop':296C 'ale':341C 'altv':543C 'altvi.st':546C 'altvi.st/)':545C 'apf':356C 'app':402C,418C,463C,513C,616C,660C 'appknox':284C 'appl':81C,128C,135C,161C,165C,183C 'appledoubl':440C 'applic':257C 'arash':340C 'arbitrari':466C,622C 'arni':287C 'assert':330C 'attack':211C,311C 'audio':498C 'august':193C 'authent':548C 'author':267C 'avail':102C,154C,197C,242C,297C,357C,404C,441C,499C,550C,602C,646C 'avevideoencod':601C,645C 'belman':641C 'beta':114C 'blackw':643C 'bound':477C,529C,536C,674C 'buffer':471C,629C 'bypass':262C 'caus':321C,377C,518C,665C 'center':352C 'check':434C,478C,537C 'cispa':350C 'code':467C,595C,623C 'confirm':141C 'content':74C,86C,120C 'corrupt':382C 'craft':457C 'custom':133C 'cve':172C,235C,275C,337C,394C,435C,479C,538C,591C,637C 'cve-id':171C 'cyberplanet':492C 'data':222C,426C 'deliv':95C 'denial':324C,521C 'denial-of-servic':323C,520C 'describ':117C 'descript':226C,265C,327C,385C,427C,469C,524C,580C,627C,669C 'determin':569C 'disclos':138C 'disclosur':583C 'discuss':139C 'document':116C,167C 'doesn':136C 'ebrahim':342C 'entri':291C,493C,596C 'execut':468C,621C 'file':458C 'first':100C 'fix':97C 'franco':640C 'generat':208C,253C,308C,368C,415C,452C,510C,561C,613C,657C 'group':348C 'handl':393C 'hardarson':288C 'helmholtz':351C 'id':173C 'impact':209C,254C,309C,369C,416C,453C,511C,562C,614C,658C 'improv':232C,272C,334C,391C,433C,476C,535C,588C,634C 'inform':178C,354C,582C 'input':335C 'intellig':644C 'investig':146C 'io':76C,88C,105C,122C,187C 'ip':573C 'ipad':206C,251C,306C,366C,413C,450C,508C,559C,611C,655C 'ipado':79C,91C,110C,125C,190C 'iphon':199C,201C,204C,224C,244C,246C,249C,299C,301C,304C,359C,361C,364C,406C,408C,411C,443C,445C,448C,501C,503C,506C,552C,554C,557C,604C,606C,609C,648C,650C,653C 'irvin':486C 'issu':143C,228C,268C,387C,429C,531C,584C 'jain':489C 'jorg':238C 'jorgwelch':240C 'kernel':383C,625C 'kumar':280C 'lead':460C 'list':158C 'made':101C 'malici':256C,456C 'malon':401C,483C 'manag':234C,274C,590C 'max':203C,248C,303C,363C,410C,447C,505C,556C,608C,652C 'may':215C,258C,317C,373C,419C,459C,514C,565C,617C,661C 'memori':384C,392C 'mirror':225C 'narendra':397C 'neonix':289C 'network':315C 'nicola':484C 'occur':148C 'out-of-bound':526C,671C 'overflow':472C,630C 'page':164C,186C 'park':542C 'patch':150C 'peter':400C,482C 'phi':346C 'physic':213C 'posit':316C 'possibl':175C 'prefer':264C 'privaci':263C 'privat':576C 'privileg':314C,626C 'process':454C 'product':184C 'protect':134C 'rabrenov':485C 'rahul':438C 'raj':439C 'rasala':281C 'reachabl':329C 'read':675C 'recent':155C 'refer':168C 'relay':577C 'releas':152C,156C,163C,192C 'remot':371C 'research':347C 'rishabh':488C 'rjcyber':490C 'sci':345C 'scy-phi':344C 'secur':73C,85C,96C,119C,129C,142C,162C,166C,180C,185C,290C,355C 'see':181C 'sensit':220C,424C 'seonung':541C 'septemb':293C,495C,598C 'servic':326C,523C,549C 'singh':398C 'size':635C 'st':544C 'state':233C,273C,589C 'store':403C 'stuart':285C 'support':82C 'system':379C,667C 'termin':380C,464C,668C 'turn':578C 'unexpect':378C,462C,666C 'updat':94C,130C,494C 'user':221C,372C,425C,571C 'valid':336C,636C 'vinay':279C 'vulner':169C 'wallac':286C 'wang':487C 'websit':564C 'welch':239C 'write':530C 'xint':594C 'xplo8e':282C 'xr':205C,250C,305C,365C,412C,449C,507C,558C,610C,654C 'xs':200C,202C,245C,247C,300C,302C,360C,362C,407C,409C,444C,446C,502C,504C,553C,555C,605C,607C,649C,651C '이재영':278C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-09-14T21:17:05+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/148287#CVE-2026-28960","url":"https://support.apple.com/en-us/148287","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-12T20:57:57+00:00","fetched_at":"2026-11-12T20:57:57+00:00","note":"Apple: About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-28960","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28960","severity":null,"published_at":"2026-09-14T21:17:05+00:00","modified_at":"2026-09-15T19:25:52+00:00","first_seen_at":"2026-11-12T21:11:27+00:00","fetched_at":"2026-11-12T21:11:27+00:00","note":null}],"documents":[{"id":27655,"url":"https://support.apple.com/en-us/148287","title":"Apple: About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support\n\n# About the security content of iOS 18.7.10 and iPadOS 18.7.10\n\nThis update delivers security fixes that were first made available in the iOS 26.6 and 27 and iPadOS 26.6 and 27 betas. This document describes the security content of iOS 18.7.10 and iPadOS 18.7.10.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 18.7.10 and iPadOS 18.7.10\n\nReleased August 17, 2026\n\n### Accessibility\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64732: Jorge Welch (@jorgwelch)\n\n### Accounts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: 이재영, Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, Arni Hardarson (Neonix Security)\n\nEntry added September 14, 2026\n\n### AirDrop\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: A reachable assertion was addressed with improved input validation.\n\nCVE-2026-43667: Arash Ale Ebrahim from SCy-Phy research group of CISPA Helmholtz Center for Information Security\n\n### APFS\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64695: Narendra Singh (@_3P1C), Peter Malone\n\n### App Store\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### AppleDouble\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43776: Peter Malone, Nicolas Rabrenovic, Irvin Wang, Rishabh Jain (rjcyber) of cyberplanet\n\nEntry updated September 14, 2026\n\n### Audio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### Authentication Services\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A website may be able to determine a user's IP address with Private Relay turned on\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-65355: Xint Code\n\nEntry added September 14, 2026\n\n### AVEVideoEncoder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### AVEVideoEncoder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun\n\n### BackgroundAssets\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to delete files for which it does not have permission\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\n### Books\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A race condition was addressed with improved checks.\n\nCVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to add contacts without user authorization\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-64746: Rodolphe Brunetti (@eisw0lf) of Lupus Nova, Daniel Febrero\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted contact may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-64734: Daniel Williams\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access information about a user's contacts\n\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreUI\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\nEntry added September 14, 2026\n\n### CoreVideo\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43802: an anonymous researcher\n\n### curl\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Authentication credentials may be sent to a server on another origin\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### Foundation\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43714: an anonymous researcher\n\n### FrontBoard\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to read a persistent device identifier\n\nCVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive Technologies\n\n### Heimdal\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial-of-service\n\nCVE-2026-64692: Redon Gashi\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nCVE-2026-64716: Peter Malone, Jonathan Alush-Aben, Arni Hardarson\n\nCVE-2026-28990: Jiri Ha, Arni Hardarson\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\nCVE-2026-43661: Gandalf4a of PKU-ICODE, Anton Pakhunov, an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43818: an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A memory corruption issue was addressed with improved bounds checking.\n\nCVE-2026-64714: an anonymous researcher\n\nEntry added September 14, 2026\n\n### IOSkywalkFamily\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-39877: Richard Zana, Dhiyanesh Selvaraj (@redroot97)\n\n### IOSurfaceAccelerator\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nDescription: An information leakage was addressed with additional validation.\n\nCVE-2026-64760: Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence, an anonymous researcher\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64749: hxr1, Hiroki Imai (LAC Co., Ltd.), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to disclose kernel memory\n\nCVE-2026-64744: Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Mahmoud Abdelmoniem, Feng Xue and XGPT of ThreatBook, Wang Yu, Nicolas Rabrenovic, Lyutoon, Hiroki Imai (LAC Co., Ltd.), Fábio Luís @scanpt, DARKNAVY (@DarkNavyOrg), an anonymous researcher\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to bypass network filters\n\nDescription: An inconsistent user interface issue was addressed with improved state management.\n\nCVE-2026-64735: Gor Aleksanyan\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43822: Michal Kosiorek, Eddy Tsalolikhin\n\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-64700: Asjid Kalam (@odinshell)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nCVE-2026-43722: Hyunwoo Kim (@v4bel), Feng Xue and XGPT of ThreatBook\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64721: Lukas Gerlach\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43809: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-43757: Wang Yu, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nCVE-2026-43754: Ernesto Martínez García, Calif Research\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64723: Ji'an Zhou, Mingxuan Yang, Ye Zhang\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-39868: Ye Zhang (@VAR10CK) of Baidu Security, Vladislav Shevchenko (Positive Technologies), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry added September 14, 2026\n\n### libarchive\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### libc\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-28973: an anonymous researcher\n\n### Libnotify\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker may be able to cause unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun\n\n### Managed Configuration\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64743: Daniel Febrero\n\n### Maps\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-64738: Robert Mindo, Nathaniel Oh (@calysteon)\n\n### mDNSResponder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker on the local network may be able to cause a denial-of-service\n\nCVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)\n\n### MediaRemote\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-28960: Steven Zhao (zhao.io)\n\nEntry added September 14, 2026\n\n### MobileAccessoryUpdater\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious accessory may be able to cause unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43807: Tristan Madani (@TristanInSec) from Talence Security\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43733: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\nCVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved input validation.\n\nCVE-2026-64772: wh0am1i, stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64774: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64770: stratan (@5tratan)\n\nCVE-2026-64769: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a 3D model may result in disclosure of process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\nCVE-2026-64722: wh0am1i\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may cause an unexpected app termination\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-64768: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-64771: wh0am1i\n\n### Pro Res\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43812: Francisco Knabe\n\n### SceneKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64764: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-64763: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64766: stratan (@5tratan)\n\nCVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)\n\nEntry updated September 14, 2026\n\n### Siri\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-43800: Stanislav Jelezoglo\n\n### Storage\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-28996: Alex Radocea\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 307669\n\nCVE-2026-43658: Do Young Park\n\nWebKit Bugzilla: 318348\n\nCVE-2026-65338: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 313452\n\nCVE-2026-43795: wwwlk\n\nWebKit Bugzilla: 311883\n\nCVE-2026-28984: Artem Dinaburg of Trail of Bits via Anthropic CVD\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access sensitive user data\n\nWebKit Bugzilla: 311228\n\nCVE-2026-28958: Cantina\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 310234\n\nCVE-2026-28947: dr3dd\n\nWebKit Bugzilla: 313691\n\nCVE-2026-43727: Tommy DeVoss from Braze Security Team (@thedawgyg), Gurpreet Shergill, Gia Bui (@yabeow) from Calif.io\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may exfiltrate data cross-origin\n\nWebKit Bugzilla: 313357\n\nCVE-2026-43735: Rhyru9, Merrick Hare, Kwak Kiyong, Song Nuri, Khai Tran, John Lussier, Gurpreet Shergill, Drinor Selmanaj (Sentry)\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 313528\n\nCVE-2026-39872: Utkarsh Pal, Ignacio Sanmillan (@ulexec)\n\nWebKit Bugzilla: 312781\n\nCVE-2026-43663: Using GLM From Z.AI, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Soyeon Park, Amy Burnett, Khai Tran, sherkito, Kota Toda, HexRabbit (@h3xr4bb1t) and NiNi (@terrynini38514) of DEVCORE Research Team, Brian Carpenter\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A memory corruption issue was addressed with improved state management.\n\nWebKit Bugzilla: 316791\n\nCVE-2026-65334: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 315082\n\nCVE-2026-64757: Milad Nasr and Nicholas Carlini with Claude, Anthropic\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nWebKit Bugzilla: 317632\n\nCVE-2026-64784: Janggoon Lee of Out of Bounds, OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317231\n\nCVE-2026-43676: Tommy DeVoss from Braze Security Team (@thedawgyg), Mateusz Krzywicki (iVerify.io), dr3dd\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 317611\n\nCVE-2026-65331: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 316723\n\nCVE-2026-65335: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317450\n\nCVE-2026-65332: Kun Peeks (@SwayZGl1tZyyy), OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317603\n\nCVE-2026-65333: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317142\n\nCVE-2026-65337: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317349\n\nCVE-2026-65336: Josef Korbel\n\nWebKit Bugzilla: 316996\n\nCVE-2026-65340: Josef Korbel (Citadelo), Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nWebKit Bugzilla: 321517\n\nCVE-2026-65351: Niels Hofmans\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: The issue was addressed with improved input validation.\n\nWebKit Bugzilla: 321484\n\nCVE-2026-64781: Thomas Guillem\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A memory corruption vulnerability was addressed with improved locking.\n\nWebKit Bugzilla: 321480\n\nCVE-2026-64782: Charles Kern, Shubham Chaskar, Seonwook Kim, lattice, Josef Korbel\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 318405\n\nCVE-2026-65341: Henock Habte\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 316347\n\nCVE-2026-64715: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative\n\nWebKit Bugzilla: 313693\n\nCVE-2026-43734: Jonathan Alush-Aben\n\nWebKit Bugzilla: 313857\n\nCVE-2026-43726: Utkarsh Pal, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Narendra Singh (@_3P1C), Josef Korbel (Citadelo), Gia Bui (@yabeow) from Calif.io\n\nWebKit Bugzilla: 317227\n\nCVE-2026-43699: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\nWebKit Bugzilla: 315161\n\nCVE-2026-43742: Юлия Мерцалова\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 316918\n\nCVE-2026-64780: OpenAI Codex Security - Amy Burnett\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 317317\n\nCVE-2026-43794: Dung Do (@_piers2) of Calif.io\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may be able to process restricted web content outside the sandbox\n\nDescription: The issue was addressed with improved input validation.\n\nWebKit Bugzilla: 312832\n\nCVE-2026-43725: Luke Francis\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 314115\n\nCVE-2026-43731: dr3dd\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A type confusion issue was addressed with improved checks.\n\nWebKit Bugzilla: 314528\n\nCVE-2026-43705: dr3dd\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may exfiltrate data cross-origin\n\nDescription: The issue was addressed with improved input validation.\n\nWebKit Bugzilla: 315306\n\nCVE-2026-43708: Muhamad Syaiful, Behzad Najjarpour Jabbari (@_G4ru_)\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may disclose sensitive user information\n\nDescription: A cross-origin issue was addressed with improved tracking of security origins.\n\nWebKit Bugzilla: 315368\n\nCVE-2026-43700: Vitaly Simonovich, Christian Meurer Xavier\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may be able to process restricted web content outside the sandbox\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 315004\n\nCVE-2026-43701: Aaron Grattafiori - NVIDIA AI Red Team\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: An out-of-bounds write issue was addressed with improved input validation.\n\nWebKit Bugzilla: 315365\n\nCVE-2026-43745: OpenAI Codex Security - Amy Burnett, Khai Tran\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313703\n\nCVE-2026-64787: Shubham Chaskar, 杉山 壮太\n\nEntry added September 14, 2026\n\n### WebKit Canvas\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313175\n\nCVE-2026-43720: Josef Korbel, Gia Bui (@yabeow) from Calif.io\n\n### WebKit History\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Visiting a maliciously crafted website may leak sensitive data\n\nWebKit Bugzilla: 322124\n\nCVE-2026-64778: Mohit Negi\n\n### WebKit Process Model\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to read files outside of its sandbox\n\nCVE-2026-43821: Brian Carpenter\n\n### WebKit Storage\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A memory corruption vulnerability was addressed with improved locking.\n\nWebKit Bugzilla: 321485\n\nCVE-2026-64779: Tommy DeVoss from Braze Security Team (@thedawgyg), Shubham Chaskar\n\n### WebRTC\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313351\n\nCVE-2026-43717: Nan Wang (@eternalsakura13)\n\nWebKit Bugzilla: 314090\n\nCVE-2026-43746: dr3dd\n\nEntry updated September 14, 2026\n\n### WebRTC\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\n### WebRTC\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 319404\n\nCVE-2026-64719: Shaheen Fazim\n\n### Wi-Fi\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64726: Peter Malone, Mathis Mansière\n\n### WorkoutKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64755: Stuart Wallace\n\n## Additional recognition\n\n### CoreMedia\n\nWe would like to acknowledge yaohway for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Cem Onat Karagun, Chris Betz, James Duffy (@0x4A616D657344), Lyutoon, Mathis Mansière, Tristan Rousseau, Yeojin Kim, YingMuo (@YingMuo) of DEVCORE Research Team for their assistance.\n\nEntry updated September 14, 2026\n\n### mDNSResponder\n\nWe would like to acknowledge Cem Onat Karagun, He Wei (ギカク), Jex Amro, 章鱼哥 (@aipy) of aipyaipy.com for their assistance.\n\n### Printing UIKit\n\nWe would like to acknowledge Jacolon Walker ( @call_eax ) for their assistance.\n\n### WebKit\n\nWe would like to acknowledge Henock Habte, Souta Sugiyama for their assistance.\n\n### WebKit JavaScript Bindings\n\nWe would like to acknowledge Karan Kurani for their assistance.\n\n Published Date: September 14, 2026","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":27655,"url":"https://support.apple.com/en-us/148287","title":"Apple: About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of iOS 18.7.10 and iPadOS 18.7.10 - Apple Support\n\n# About the security content of iOS 18.7.10 and iPadOS 18.7.10\n\nThis update delivers security fixes that were first made available in the iOS 26.6 and 27 and iPadOS 26.6 and 27 betas. This document describes the security content of iOS 18.7.10 and iPadOS 18.7.10.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 18.7.10 and iPadOS 18.7.10\n\nReleased August 17, 2026\n\n### Accessibility\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n\nDescription: This issue was addressed through improved state management.\n\nCVE-2026-64732: Jorge Welch (@jorgwelch)\n\n### Accounts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: 이재영, Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, Arni Hardarson (Neonix Security)\n\nEntry added September 14, 2026\n\n### AirDrop\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: A reachable assertion was addressed with improved input validation.\n\nCVE-2026-43667: Arash Ale Ebrahim from SCy-Phy research group of CISPA Helmholtz Center for Information Security\n\n### APFS\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64695: Narendra Singh (@_3P1C), Peter Malone\n\n### App Store\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-43801: Rahul Raj\n\n### AppleDouble\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43776: Peter Malone, Nicolas Rabrenovic, Irvin Wang, Rishabh Jain (rjcyber) of cyberplanet\n\nEntry updated September 14, 2026\n\n### Audio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)\n\n### Authentication Services\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A website may be able to determine a user's IP address with Private Relay turned on\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-65355: Xint Code\n\nEntry added September 14, 2026\n\n### AVEVideoEncoder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-64747: Franco Belman at Blackwing Intelligence\n\n### AVEVideoEncoder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun\n\n### BackgroundAssets\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to delete files for which it does not have permission\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab\n\n### Books\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A race condition was addressed with improved checks.\n\nCVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to add contacts without user authorization\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-64746: Rodolphe Brunetti (@eisw0lf) of Lupus Nova, Daniel Febrero\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted contact may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-64734: Daniel Williams\n\n### Contacts\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access information about a user's contacts\n\nCVE-2026-43797: Arni Hardarson (Neonix Security)\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted audio file may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing an audio stream in a maliciously crafted media file may terminate the process\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher\n\n### CoreAudio\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43803: Rahul Raj\n\n### CoreMedia\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-43711: James Duffy (@0x4A616D657344)\n\n### CoreUI\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\nEntry added September 14, 2026\n\n### CoreVideo\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-43802: an anonymous researcher\n\n### curl\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Authentication credentials may be sent to a server on another origin\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### Foundation\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43714: an anonymous researcher\n\n### FrontBoard\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64742: Huỳnh Tấn Ngàn\n\n### Game Center\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-64740: Manuel Fernandez (Stackhopper Security)\n\n### Game Center\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to read a persistent device identifier\n\nCVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive Technologies\n\n### Heimdal\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause a denial-of-service\n\nCVE-2026-64692: Redon Gashi\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nCVE-2026-64716: Peter Malone, Jonathan Alush-Aben, Arni Hardarson\n\nCVE-2026-28990: Jiri Ha, Arni Hardarson\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\nCVE-2026-43661: Gandalf4a of PKU-ICODE, Anton Pakhunov, an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43818: an anonymous researcher\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-64693: Geonha Lee (@leegn4a)\n\n### ImageIO\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may lead to a denial-of-service\n\nDescription: A memory corruption issue was addressed with improved bounds checking.\n\nCVE-2026-64714: an anonymous researcher\n\nEntry added September 14, 2026\n\n### IOSkywalkFamily\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-39877: Richard Zana, Dhiyanesh Selvaraj (@redroot97)\n\n### IOSurfaceAccelerator\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nDescription: An information leakage was addressed with additional validation.\n\nCVE-2026-64760: Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence, an anonymous researcher\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64749: hxr1, Hiroki Imai (LAC Co., Ltd.), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to disclose kernel memory\n\nCVE-2026-64744: Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Mahmoud Abdelmoniem, Feng Xue and XGPT of ThreatBook, Wang Yu, Nicolas Rabrenovic, Lyutoon, Hiroki Imai (LAC Co., Ltd.), Fábio Luís @scanpt, DARKNAVY (@DarkNavyOrg), an anonymous researcher\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to bypass network filters\n\nDescription: An inconsistent user interface issue was addressed with improved state management.\n\nCVE-2026-64735: Gor Aleksanyan\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43822: Michal Kosiorek, Eddy Tsalolikhin\n\nCVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-64700: Asjid Kalam (@odinshell)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: The issue was addressed with improved input sanitization.\n\nCVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nCVE-2026-43722: Hyunwoo Kim (@v4bel), Feng Xue and XGPT of ThreatBook\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64721: Lukas Gerlach\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43809: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-43757: Wang Yu, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to leak sensitive kernel state\n\nCVE-2026-43754: Ernesto Martínez García, Calif Research\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64723: Ji'an Zhou, Mingxuan Yang, Ye Zhang\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-39868: Ye Zhang (@VAR10CK) of Baidu Security, Vladislav Shevchenko (Positive Technologies), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote user may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry added September 14, 2026\n\n### libarchive\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\n### libc\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-28973: an anonymous researcher\n\n### Libnotify\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker may be able to cause unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun\n\n### Managed Configuration\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64743: Daniel Febrero\n\n### Maps\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-64738: Robert Mindo, Nathaniel Oh (@calysteon)\n\n### mDNSResponder\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker on the local network may be able to cause a denial-of-service\n\nCVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)\n\n### MediaRemote\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-28960: Steven Zhao (zhao.io)\n\nEntry added September 14, 2026\n\n### MobileAccessoryUpdater\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious accessory may be able to cause unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-43807: Tristan Madani (@TristanInSec) from Talence Security\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43733: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\nCVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved input validation.\n\nCVE-2026-64772: wh0am1i, stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64774: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64770: stratan (@5tratan)\n\nCVE-2026-64769: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a 3D model may result in disclosure of process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\nCVE-2026-64722: wh0am1i\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may cause an unexpected app termination\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-64768: stratan (@5tratan)\n\n### Model I/O\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A remote attacker may be able to cause unexpected application termination or heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-64771: wh0am1i\n\n### Pro Res\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-43812: Francisco Knabe\n\n### SceneKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64764: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-64763: stratan (@5tratan)\n\n### SceneKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64766: stratan (@5tratan)\n\nCVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)\n\nEntry updated September 14, 2026\n\n### Siri\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-43800: Stanislav Jelezoglo\n\n### Storage\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-28996: Alex Radocea\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 307669\n\nCVE-2026-43658: Do Young Park\n\nWebKit Bugzilla: 318348\n\nCVE-2026-65338: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 313452\n\nCVE-2026-43795: wwwlk\n\nWebKit Bugzilla: 311883\n\nCVE-2026-28984: Artem Dinaburg of Trail of Bits via Anthropic CVD\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to access sensitive user data\n\nWebKit Bugzilla: 311228\n\nCVE-2026-28958: Cantina\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 310234\n\nCVE-2026-28947: dr3dd\n\nWebKit Bugzilla: 313691\n\nCVE-2026-43727: Tommy DeVoss from Braze Security Team (@thedawgyg), Gurpreet Shergill, Gia Bui (@yabeow) from Calif.io\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may exfiltrate data cross-origin\n\nWebKit Bugzilla: 313357\n\nCVE-2026-43735: Rhyru9, Merrick Hare, Kwak Kiyong, Song Nuri, Khai Tran, John Lussier, Gurpreet Shergill, Drinor Selmanaj (Sentry)\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 313528\n\nCVE-2026-39872: Utkarsh Pal, Ignacio Sanmillan (@ulexec)\n\nWebKit Bugzilla: 312781\n\nCVE-2026-43663: Using GLM From Z.AI, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Soyeon Park, Amy Burnett, Khai Tran, sherkito, Kota Toda, HexRabbit (@h3xr4bb1t) and NiNi (@terrynini38514) of DEVCORE Research Team, Brian Carpenter\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A memory corruption issue was addressed with improved state management.\n\nWebKit Bugzilla: 316791\n\nCVE-2026-65334: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 315082\n\nCVE-2026-64757: Milad Nasr and Nicholas Carlini with Claude, Anthropic\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nWebKit Bugzilla: 317632\n\nCVE-2026-64784: Janggoon Lee of Out of Bounds, OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317231\n\nCVE-2026-43676: Tommy DeVoss from Braze Security Team (@thedawgyg), Mateusz Krzywicki (iVerify.io), dr3dd\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 317611\n\nCVE-2026-65331: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 316723\n\nCVE-2026-65335: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317450\n\nCVE-2026-65332: Kun Peeks (@SwayZGl1tZyyy), OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317603\n\nCVE-2026-65333: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317142\n\nCVE-2026-65337: OpenAI Codex Security - Amy Burnett\n\nWebKit Bugzilla: 317349\n\nCVE-2026-65336: Josef Korbel\n\nWebKit Bugzilla: 316996\n\nCVE-2026-65340: Josef Korbel (Citadelo), Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\nWebKit Bugzilla: 321517\n\nCVE-2026-65351: Niels Hofmans\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: The issue was addressed with improved input validation.\n\nWebKit Bugzilla: 321484\n\nCVE-2026-64781: Thomas Guillem\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A memory corruption vulnerability was addressed with improved locking.\n\nWebKit Bugzilla: 321480\n\nCVE-2026-64782: Charles Kern, Shubham Chaskar, Seonwook Kim, lattice, Josef Korbel\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 318405\n\nCVE-2026-65341: Henock Habte\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 316347\n\nCVE-2026-64715: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative\n\nWebKit Bugzilla: 313693\n\nCVE-2026-43734: Jonathan Alush-Aben\n\nWebKit Bugzilla: 313857\n\nCVE-2026-43726: Utkarsh Pal, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Narendra Singh (@_3P1C), Josef Korbel (Citadelo), Gia Bui (@yabeow) from Calif.io\n\nWebKit Bugzilla: 317227\n\nCVE-2026-43699: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\nWebKit Bugzilla: 315161\n\nCVE-2026-43742: Юлия Мерцалова\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 316918\n\nCVE-2026-64780: OpenAI Codex Security - Amy Burnett\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 317317\n\nCVE-2026-43794: Dung Do (@_piers2) of Calif.io\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may be able to process restricted web content outside the sandbox\n\nDescription: The issue was addressed with improved input validation.\n\nWebKit Bugzilla: 312832\n\nCVE-2026-43725: Luke Francis\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 314115\n\nCVE-2026-43731: dr3dd\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A type confusion issue was addressed with improved checks.\n\nWebKit Bugzilla: 314528\n\nCVE-2026-43705: dr3dd\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may exfiltrate data cross-origin\n\nDescription: The issue was addressed with improved input validation.\n\nWebKit Bugzilla: 315306\n\nCVE-2026-43708: Muhamad Syaiful, Behzad Najjarpour Jabbari (@_G4ru_)\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may disclose sensitive user information\n\nDescription: A cross-origin issue was addressed with improved tracking of security origins.\n\nWebKit Bugzilla: 315368\n\nCVE-2026-43700: Vitaly Simonovich, Christian Meurer Xavier\n\nEntry updated September 14, 2026\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: A malicious website may be able to process restricted web content outside the sandbox\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 315004\n\nCVE-2026-43701: Aaron Grattafiori - NVIDIA AI Red Team\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: An out-of-bounds write issue was addressed with improved input validation.\n\nWebKit Bugzilla: 315365\n\nCVE-2026-43745: OpenAI Codex Security - Amy Burnett, Khai Tran\n\n### WebKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313703\n\nCVE-2026-64787: Shubham Chaskar, 杉山 壮太\n\nEntry added September 14, 2026\n\n### WebKit Canvas\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313175\n\nCVE-2026-43720: Josef Korbel, Gia Bui (@yabeow) from Calif.io\n\n### WebKit History\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Visiting a maliciously crafted website may leak sensitive data\n\nWebKit Bugzilla: 322124\n\nCVE-2026-64778: Mohit Negi\n\n### WebKit Process Model\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An app may be able to read files outside of its sandbox\n\nCVE-2026-43821: Brian Carpenter\n\n### WebKit Storage\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A memory corruption vulnerability was addressed with improved locking.\n\nWebKit Bugzilla: 321485\n\nCVE-2026-64779: Tommy DeVoss from Braze Security Team (@thedawgyg), Shubham Chaskar\n\n### WebRTC\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313351\n\nCVE-2026-43717: Nan Wang (@eternalsakura13)\n\nWebKit Bugzilla: 314090\n\nCVE-2026-43746: dr3dd\n\nEntry updated September 14, 2026\n\n### WebRTC\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\n### WebRTC\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nWebKit Bugzilla: 319404\n\nCVE-2026-64719: Shaheen Fazim\n\n### Wi-Fi\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64726: Peter Malone, Mathis Mansière\n\n### WorkoutKit\n\nAvailable for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation\n\nCVE-2026-64755: Stuart Wallace\n\n## Additional recognition\n\n### CoreMedia\n\nWe would like to acknowledge yaohway for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Cem Onat Karagun, Chris Betz, James Duffy (@0x4A616D657344), Lyutoon, Mathis Mansière, Tristan Rousseau, Yeojin Kim, YingMuo (@YingMuo) of DEVCORE Research Team for their assistance.\n\nEntry updated September 14, 2026\n\n### mDNSResponder\n\nWe would like to acknowledge Cem Onat Karagun, He Wei (ギカク), Jex Amro, 章鱼哥 (@aipy) of aipyaipy.com for their assistance.\n\n### Printing UIKit\n\nWe would like to acknowledge Jacolon Walker ( @call_eax ) for their assistance.\n\n### WebKit\n\nWe would like to acknowledge Henock Habte, Souta Sugiyama for their assistance.\n\n### WebKit JavaScript Bindings\n\nWe would like to acknowledge Karan Kurani for their assistance.\n\n Published Date: September 14, 2026","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}