--- id: "CVE-2026-65360" kind: "vulnerability" aliases: ["CVE-2026-65360"] title: "A race condition was addressed with improved state handling" severity: "medium" cvss: 4.7 epss: null exploited: false status: "open" category: "infrastructure" products: [{"name": "apple ipados", "fixed": ["26.7"], "affected": "< 26.7", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["26.7"], "affected": "< 26.7", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["15.8"], "affected": ">= 15.0, < 15.8", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["26.7"], "affected": ">= 26.0, < 26.7", "ecosystem": "vendor"}, {"name": "apple tvos", "fixed": ["27.0"], "affected": "< 27.0", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["27.0"], "affected": "< 27.0", "ecosystem": "vendor"}, {"name": "apple watchos", "fixed": ["27.0"], "affected": "< 27.0", "ecosystem": "vendor"}] ecosystems: ["vendor"] tags: ["apple", "infrastructure", "ios", "ipad", "ipados", "iphone", "vendor-advisory"] not_affected_if: ["devices-on-ios-27-or-later", "unlisted-models"] published_at: "2026-09-14T21:17:21+00:00" first_seen_at: "2026-10-31T00:35:04+00:00" updated_at: "2026-10-31T01:03:58+00:00" sources: [{"source": "lab", "url": "https://support.apple.com/en-us/149034", "first_seen_at": "2026-10-31T00:35:04+00:00"}, {"source": "lab", "url": "https://support.apple.com/en-us/149041", "first_seen_at": "2026-10-31T00:35:04+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65360", "first_seen_at": "2026-10-31T01:03:58+00:00"}] --- # A race condition was addressed with improved state handling Apple's iOS 27 and iPadOS 27 security notes list many flaws, mostly in system components such as Accessibility, APFS, Bluetooth, and Baseband. The entries describe apps reading sensitive data or bypassing privacy settings, plus memory-corruption bugs that can crash the system and, in a few cases, let a sandboxed app run code with kernel privileges or let a remote attacker run code over Bluetooth. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:apple ipados affected < 26.7 fixed 26.7 - vendor:apple iphone os affected < 26.7 fixed 26.7 - vendor:apple macos affected >= 15.0, < 15.8 fixed 15.8 - vendor:apple macos affected >= 26.0, < 26.7 fixed 26.7 - vendor:apple tvos affected < 27.0 fixed 27.0 - vendor:apple visionos affected < 27.0 fixed 27.0 - vendor:apple watchos affected < 27.0 fixed 27.0 ## How to check - Check the installed version on each iPhone or iPad against `iOS 27` or `iPadOS 27`, using Settings > General > About - Compare the device's model with the "Available for" list in Apple's advisory (https://support.apple.com/en-us/149034) ## Fix - iOS 27 and iPadOS 27 (released September 14, 2026) contain the fixes, per Apple's advisory ## Timeline - 2026-10-31T00:35:04+00:00 lab https://support.apple.com/en-us/149034 — Apple: About the security content of iOS 27 and iPadOS 27 - Apple Support - 2026-10-31T00:35:04+00:00 lab https://support.apple.com/en-us/149041 — Apple: About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support - 2026-10-31T01:03:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-65360 ## Documents - [advisory] Apple: About the security content of iOS 27 and iPadOS 27 - Apple Support https://support.apple.com/en-us/149034 - [advisory] Apple: About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support https://support.apple.com/en-us/149041 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/149035 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/149036 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/149037 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/149038 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/149042 - [advisory] Vendor advisory: support.apple.com https://support.apple.com/en-us/149043 ## From the sources About the security content of iOS 27 and iPadOS 27 - Apple Support # About the security content of iOS 27 and iPadOS 27 This document describes the security content of iOS 27 and iPadOS 27. ## About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page. Apple security documents reference vulnerabilities by CVE-ID when possible. For more information about security, see the Apple Product Security page. ## iOS 27 and iPadOS 27 Released September 14, 2026 ### Accelerate Framework Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted image may lead to unexpected process termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86882: Peter Malone ### Accelerate Framework Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Processing a maliciously crafted image may lead to unexpected app termination Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2026-86918: Arni Hardarson (Neonix Security) Entry added October 19, 2026 ### Accessibility Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: This issue was addressed with improved data protection. CVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433) ### Accessibility Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to identify what other apps a user has installed Description: A privacy issue was addressed with improved handling of user preferences. ### Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: A malicious application may be able to bypass Privacy preferences Description: An authorization issue was addressed with improved state management. ### APFS Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or write kernel memory Description: An out-of-bounds write issue was addressed with improved bounds checking. ### App Intents Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to access sensitive user data Description: A privacy issue was addressed with improved access restrictions. Entry added October 19, 2026 ### App Store Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: A local app may be able to read a persistent account identifier Description: A permissions issue was addressed with additional restrictions. ### Apple Account Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account Description: An authentication issue was addressed with improved state management. CVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka) ### Apple Intelligence Available for: iPhone 15 Pro and later, iPad Pro 12.9-inch 5th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 5th generation and later, and iPad mini 7th generation Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-86920: Johan Wahyudi CVE-2026-86955: Abodi Dawoud Entry added October 19, 2026, updated October 26, 2026 ### Apple Neural Engine Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination Description: An integer overflow was addressed with improved input validation. ### Apple Neural Engine Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination or write kernel memory CVE-2026-84634: S. Rosario Entry added October 26, 2026 ### Apple Neural Engine Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. Entry added October 26, 2026 ### AppleAVD Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. ### AppleDouble Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination Description: An out-of-bounds write issue was addressed with improved bounds checking. ### AppleKeyStore Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later Impact: An app may be able to cause unexpected system termination Description: A use after free issue was addressed with improved memory management. ### Authentication Services Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_