{"id":"CVE-2026-84487","kind":"vulnerability","aliases":["CVE-2026-84487"],"related":[],"title":"An integer overflow was addressed with improved input validation","description":"About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support\n\n# About the security content of iOS 26.7 and iPadOS 26.7\n\nThis document describes the security content of iOS 26.7 and iPadOS 26.7.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 26.7 and iPadOS 26.7\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accessibility\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious Software, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma (@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\n### APFS\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### AppleAVD\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\n### AppleDouble\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### AuthKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\n### BackgroundAssets\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logic issue was addressed with improved validation.\n\n### Baseband\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: A denial-of-service issue was addressed with improved input validation.\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### copyfile\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\n### Core Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nCVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io\n\nEntry added October 26, 2026\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Parsing a file may lead to an unexpected app termination or arbitrary code execution\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit\n\nEntry added October 26, 2026\n\n### CoreMedia Video Toolbox\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\n### CoreML\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreText\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing web content may lead to a denial-of-service\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\n### DeviceCheck\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\n### Disk Images\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDe","summary":"Apple's security notes for iOS 26.7 and iPadOS 26.7 list many fixes across system components, including out-of-bounds writes, use-after-free and kernel-privilege issues. Some entries let a local app read sensitive data or run code with kernel privileges, and others let a remote attacker crash apps or execute code over Bluetooth.","severity":"high","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"apple ipados","fixed":["26.7"],"affected":"< 26.7","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["26.7"],"affected":"< 26.7","ecosystem":"vendor"},{"name":"apple macos","fixed":["15.8"],"affected":">= 15.0, < 15.8","ecosystem":"vendor"},{"name":"apple macos","fixed":["26.7"],"affected":">= 26.0, < 26.7","ecosystem":"vendor"},{"name":"apple tvos","fixed":["27.0"],"affected":"< 27.0","ecosystem":"vendor"},{"name":"apple visionos","fixed":["27.0"],"affected":"< 27.0","ecosystem":"vendor"},{"name":"apple watchos","fixed":["27.0"],"affected":"< 27.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","ios","ipad","ipados","iphone","vendor","vendor-advisory"],"not_affected_if":[],"how_to_check":"- Open Settings > General > About on the iPhone or iPad and read the iOS or iPadOS version.\n- The sources do not give a full list of affected versions beyond the fixed release.","fix":"- Move to iOS 26.7 and iPadOS 26.7 (released September 14, 2026 per the advisory).","status":"open","published_at":"2026-09-14T21:17:26+00:00","first_seen_at":"2026-10-31T00:35:04+00:00","triaged_at":"2026-10-31T00:35:40+00:00","updated_at":"2026-10-31T01:03:58+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-31T00:35:40Z","model":"claude-haiku-5-5","output":{"fix":"- Move to iOS 26.7 and iPadOS 26.7 (released September 14, 2026 per the advisory).","reach":"unknown","title":"Apple iOS 26.7 and iPadOS 26.7 fix many memory and permission flaws","impact":"high","summary":"Apple's security notes for iOS 26.7 and iPadOS 26.7 list many fixes across system components, including out-of-bounds writes, use-after-free and kernel-privilege issues. Some entries let a local app read sensitive data or run code with kernel privileges, and others let a remote attacker crash apps or execute code over Bluetooth.","audience":"everyone","category":"vendor","nicknames":[],"who_cares":["iphone","ipad","ios","ipados"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Some flaws allow arbitrary code execution or kernel-level access from an app or nearby device.","analyst_note":"Advisory text is truncated; review the full Apple page at https://support.apple.com/en-us/149041 for the complete component list and per-CVE impact.","how_to_check":"- Open Settings > General > About on the iPhone or iPad and read the iOS or iPadOS version.\n- The sources do not give a full list of affected versions beyond the fixed release.","plain_action":"Update your iPhone or iPad to iOS 26.7 or iPadOS 26.7 through Settings > General > Software Update.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Every iPhone and iPad listed in the advisory, including iPhone 11 and later and iPad models from the 8th generation and up, is covered by these fixes. The advisory lists the affected components only; the sources do not say which configurations are most exposed.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.001182,"input_tokens":8571,"output_tokens":649,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A,271C,337C '-43664':338C '-84487':12A,15A '-86882':272C '11':207C,220C,279C,292C,369C,382C,441C,454C,503C,516C,567C,580C,637C,650C,700C,713C '12.9':212C,284C,374C,446C,508C,572C,642C,705C '14':200C '1st':222C,294C,384C,456C,518C,582C,652C,715C '2026':201C '26.7':46B,49B,105C,108C,117C,120C,129C,132C,194C,197C '3rd':214C,228C,286C,300C,376C,390C,448C,462C,510C,524C,574C,588C,644C,658C,707C,721C '5th':240C,312C,402C,474C,536C,600C,670C '8th':233C,305C,395C,467C,529C,593C,663C,726C 'abl':321C,411C,483C,545C,680C 'acceler':202C 'access':275C,323C 'account':685C 'across':53B 'addit':694C 'address':5A,265C,331C,430C,494C,558C,628C,692C 'advisori':39B 'air':227C,299C,389C,461C,523C,587C,657C,720C 'andr':352C 'andrd3v':353C 'apf':365C 'app':76B,93B,318C,408C,480C,542C,677C 'appl':31B,40B,109C,134C,141C,167C,171C,189C,435C 'apple':16A,18A,21A,23A,25A,27A,29A 'appleavd':499C 'appledoubl':563C 'asaf':363C 'attack':91B 'authkit':633C 'avail':160C,204C,276C,366C,438C,500C,564C,634C,697C 'avevideoencod':696C 'bluetooth':98B 'bound':60B,261C,268C,426C,433C,624C,631C 'caus':413C,485C,547C 'check':269C,434C,632C 'cj':361C 'code':82B,96B 'cohen':364C 'compon':55B 'confirm':147C 'content':102C,114C,126C 'craft':248C,611C 'crash':92B 'custom':139C 'cve':10A,13A,178C,270C,336C 'cve-id':177C 'daniel':359C 'data':79B,326C,334C 'david':357C 'describ':123C 'descript':256C,327C,421C,489C,551C,619C,687C 'disclos':144C 'discuss':145C 'disk':607C 'document':122C,173C 'doesn':142C 'engin':437C 'entri':72B 'execut':95B 'febrero':360C 'file':612C 'fix':52B 'framework':203C 'free':65B,555C 'generat':215C,223C,229C,234C,241C,287C,295C,301C,306C,313C,377C,385C,391C,396C,403C,449C,457C,463C,468C,475C,511C,519C,525C,530C,537C,575C,583C,589C,594C,601C,645C,653C,659C,664C,671C,708C,716C,722C,727C 'gongyu':354C 'id':179C 'identifi':686C 'ilya':351C 'imag':249C,608C 'impact':244C,316C,406C,478C,540C,604C,674C 'improv':7A,267C,333C,432C,496C,560C,630C 'inch':213C,221C,285C,293C,375C,383C,447C,455C,509C,517C,573C,581C,643C,651C,706C,714C 'includ':56B 'inform':184C 'input':8A,497C 'integ':2A,491C 'investig':152C 'io':32B,45B,104C,116C,128C,193C 'ipad':33B,210C,218C,226C,232C,238C,282C,290C,298C,304C,310C,372C,380C,388C,394C,400C,444C,452C,460C,466C,472C,506C,514C,522C,528C,534C,570C,578C,586C,592C,598C,640C,648C,656C,662C,668C,703C,711C,719C,725C,731C 'ipado':34B,48B,107C,119C,131C,196C 'ipados':17A 'iphon':35B,206C,278C,368C,440C,502C,566C,636C,699C 'iphone':19A 'issu':70B,149C,263C,329C,428C,556C,626C,690C 'jian':348C 'keller':342C 'kernel':68B,84B,419C 'kernel-privileg':67B 'later':209C,217C,225C,231C,236C,243C,281C,289C,297C,303C,308C,315C,371C,379C,387C,393C,398C,405C,443C,451C,459C,465C,470C,477C,505C,513C,521C,527C,532C,539C,569C,577C,585C,591C,596C,603C,639C,647C,655C,661C,666C,673C,702C,710C,718C,724C,729C 'lead':251C,614C 'lee':349C 'let':73B,88B 'list':50B,164C 'local':75B,676C 'ma':355C 'macos':22A,24A 'malici':247C,346C,610C 'malon':274C 'manag':562C 'mani':51B 'may':250C,319C,409C,481C,543C,613C,678C 'memori':420C,561C 'mezone0':356C 'mini':239C,311C,401C,473C,535C,599C,669C,732C 'mount':605C 'neural':436C 'note':43B 'occur':154C 'os':20A 'other':87B 'out-of-bound':57B,258C,423C,621C 'overflow':3A,492C 'page':170C,192C 'patch':156C 'permiss':689C 'persist':684C 'peter':273C 'possibl':181C 'privileg':69B,85B 'pro':211C,219C,283C,291C,373C,381C,445C,453C,507C,515C,571C,579C,641C,649C,704C,712C 'process':245C,254C 'product':190C 'protect':140C,335C 'read':77B,682C 'recent':161C 'refer':174C 'releas':158C,162C,169C,198C 'remot':90B 'restrict':695C 'rosyna':341C 'run':81B 'secur':42B,101C,113C,125C,135C,148C,168C,172C,186C,191C 'see':187C 'sensit':78B,324C 'septemb':199C 'softwar':347C 'speedyfriend433':350C 'strnadel':358C 'stuart':339C 'support':110C 'system':54B,415C,487C,549C,617C 'termin':255C,416C,488C,550C,618C 'total':344C 'tvos':26A 'unexpect':253C,414C,486C,548C,616C 'updat':136C 'use':63B,553C 'use-after-fre':62B 'user':325C 'valid':9A,498C 'vana':362C 'vendor':36B,38B 'vendor-advisori':37B 'visionos':28A 'vulner':175C 'wallac':340C 'watchos':30A 'write':61B,262C,418C,427C,625C","nicknames":[],"mitigations":[],"who_affected":"Every iPhone and iPad listed in the advisory, including iPhone 11 and later and iPad models from the 8th generation and up, is covered by these fixes. The advisory lists the affected components only; the sources do not say which configurations are most exposed.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update your iPhone or iPad to iOS 26.7 or iPadOS 26.7 through Settings > General > Software Update.","first_public_at":"2026-09-14T21:17:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/149041#CVE-2026-84487","url":"https://support.apple.com/en-us/149041","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-31T00:35:04+00:00","fetched_at":"2026-10-31T00:35:04+00:00","note":"Apple: About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-84487","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84487","severity":null,"published_at":"2026-09-14T21:17:26+00:00","modified_at":"2026-09-16T18:41:57+00:00","first_seen_at":"2026-10-31T01:03:58+00:00","fetched_at":"2026-10-31T01:03:58+00:00","note":null}],"documents":[{"id":27323,"url":"https://support.apple.com/en-us/149041","title":"Apple: About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support","kind":"advisory","source":"lab","publisher":"vendor","text":"About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support\n\n# About the security content of iOS 26.7 and iPadOS 26.7\n\nThis document describes the security content of iOS 26.7 and iPadOS 26.7.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 26.7 and iPadOS 26.7\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accessibility\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious Software, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma (@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\n### APFS\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### AppleAVD\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\n### AppleDouble\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### AuthKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\n### BackgroundAssets\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logic issue was addressed with improved validation.\n\n### Baseband\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: A denial-of-service issue was addressed with improved input validation.\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### copyfile\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\n### Core Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\n### CoreAudio\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nCVE-2026-113912: an anonymous researcher, 章鱼哥@aipy (aipyaipy.com), Roman Zabicki, Anna Groza (@pwnlambda) of Calif.io\n\nEntry added October 26, 2026\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Parsing a file may lead to an unexpected app termination or arbitrary code execution\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-112688: 정우 하 (@0xfa11babe), Chris Bailey - Short Circuit\n\nEntry added October 26, 2026\n\n### CoreMedia Video Toolbox\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\n### CoreML\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreText\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing web content may lead to a denial-of-service\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\n### DeviceCheck\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\n### Disk Images\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), flower xu, Adriatik Raci, PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### exFAT\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Mounting a maliciously crafted volume may lead to unexpected system termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\n### file_cmds\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n\nDescription: A path handling issue was addressed with improved validation.\n\n### FontParser\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\n### Foundation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Graphics\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may corrupt process memory\n\nDescription: A buffer overflow issue was addressed with improved memory handling.\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may result in memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### IOAcceleratorFamily\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### IOGPUFamily\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A malicious app may be able to gain root privileges\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Connecting to a malicious NFS server may disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: An information disclosure issue was addressed with improved memory management.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nEntry added October 19, 2026\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86916: Wang Yu\n\n### libarchive\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\n### Messages\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An input validation issue was addressed with improved input validation.\n\nEntry added October 19, 2026\n\n### MobileAccessoryUpdater\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Connecting a malicious accessory may cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\n### MobileBackup\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: A path handling issue was addressed with improved validation.\n\n### MobileBackup\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n\nDescription: A path traversal issue was addressed with improved path validation.\n\n### Model I/O\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Opening a maliciously crafted file may lead to unexpected process termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-112565: Musaab Khan (@bxff), Saoud Khalifah, stratan (@5tratan), Niels Hofmans, Hcamael and 章鱼哥@aipy (aipyaipy.com)\n\nEntry added October 26, 2026\n\n### Music\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nDescription: An authorization issue was addressed with improved state management.\n\n### NetworkExtension\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to identify what other apps a user has installed\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nEntry updated October 19, 2026\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\n### Power Management\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to fingerprint the device\n\nDescription: An authorization issue was addressed with improved state management.\n\n### RealityKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-84532: Franco Belman at Blackwing Intelligence, Hongsik Kim (mnur), stratan (@5tratan)\n\nEntry updated October 26, 2026\n\n### RealityKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Reminders\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-65403: Rahul Raj\n\n### Safe Browsing\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-86897: Stuart Wallace\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84487: stratan (@5tratan), Peter Malone, Dhiyanesh Selvaraj (@redroot97)\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### SceneKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Security\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\n### Siri\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: A local attacker may be able to overwrite restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nEntry added October 19, 2026\n\n### Siri Suggestions\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker with physical access to a locked device may be able to view sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\n### Spotlight\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved access control.\n\n### SpringBoard\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to cause a denial-of-service\n\n### Storage\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to modify protected parts of the file system\n\n### Symptom Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nDescription: A privacy issue was addressed with improved private data redaction for log entries.\n\n### TCC\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to modify protected system files\n\nDescription: A path traversal issue was addressed with improved input validation.\n\nCVE-2026-86886: Constantin Clerc, Shad J, Huy Nguyen (@34306) of Calif.io, huami1314 (@huamidev), an anonymous researcher\n\n### Time Zone\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An app may be able to bypass certain Privacy preferences\n\n### Watch App\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nDescription: A privacy issue was addressed with improved state management.\n\n### WebKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313577\n\n### WebKit Canvas\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected Safari crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313935\n\n### Wi-Fi\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### XPC\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84617: Stuart Wallace\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Contacts\n\nWe would like to acknowledge 이지안 (@speedyfriend433) for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### configd\n\nWe would like to acknowledge 九宫格 of Chongqing Telecom for their assistance.\n\nEntry added October 26, 2026\n\n### ImageIO\n\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy), Muhamad Syaiful, an anonymous researcher, songbird for their assistance.\n\nEntry updated October 19, 2026\n\n### Kernel\n\nWe would like to acknowledge Bil","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":27322,"url":"https://support.apple.com/en-us/149034","title":"Apple: About the security content of iOS 27 and iPadOS 27 - Apple Support","kind":"advisory","source":"lab","publisher":"vendor","text":"About the security content of iOS 27 and iPadOS 27 - Apple Support\n\n# About the security content of iOS 27 and iPadOS 27\n\nThis document describes the security content of iOS 27 and iPadOS 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## iOS 27 and iPadOS 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accessibility\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to identify what other apps a user has installed\n\nDescription: A privacy issue was addressed with improved handling of user preferences.\n\n### Accounts\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\n### APFS\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### App Intents\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### Apple Account\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: iPhone 15 Pro and later, iPad Pro 12.9-inch 5th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 5th generation and later, and iPad mini 7th generation\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nCVE-2026-86955: Abodi Dawoud\n\nEntry added October 19, 2026, updated October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\n### AppleDouble\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### AppleKeyStore\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\n### Authentication Services\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to delete credentials stored in Keychain\n\n### AuthKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A local app may be able to read a persistent account identifier\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\n### AVEVideoEncoder\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\n### BackgroundAssets\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nDescription: A logic issue was addressed with improved validation.\n\n### Baseband\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-86885: Tuan D. Hoang, Hazem Issa, and Yongdae Kim @ KAIST SysSec Lab\n\n### Baseband\n\nAvailable for: iPhone 11 and later\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nDescription: A denial-of-service issue was addressed with improved input validation.\n\nCVE-2026-86879: Hazem Issa and Yongdae Kim @ SysSec, KAIST\n\n### Baseband\n\nAvailable for: iPhone 11 and later\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: A denial-of-service issue was addressed with improved input validation.\n\nCVE-2026-86963: Beomseok Oh (@KAIST), Yongdae Kim (@KAIST)\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\n### Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### Camera\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### CloudKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: An information disclosure issue was addressed with improved state management.\n\n### CloudKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to read device name\n\n### copyfile\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-86966: Jihwan Yoon\n\nEntry added October 26, 2026\n\n### Core Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\n### Core Bluetooth\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed by removing the vulnerable code.\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreMedia\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\n### CoreML\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\n### CoreMotion\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\n### CoreUI\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### CoreUI\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\n### CoreUI\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\n### CoreUI\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\n### CoreUI\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### DeviceCheck\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### Disk Images\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), flower xu, Adriatik Raci, PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), Hyunwoo Kim (@v4bel)\n\n### exFAT\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Mounting a maliciously crafted volume may lead to unexpected system termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\n### File Bookmark\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to modify a file it only had permission to read\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### file_cmds\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n\nDescription: A path handling issue was addressed with improved validation.\n\n### Filters\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\n### FontParser\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\n### FontParser\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\n### Foundation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\n### Foundation\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A malicious app may be able to break out of its sandbox\n\n### Graphics\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\n### Heimdal\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An attacker in a privileged network position may be able to modify network traffic\n\nDescription: A cryptographic issue was addressed with improved integrity checks.\n\n### Heimdal\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\n### iCloud\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\n### Image Capture\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may result in memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-64750: Mateusz Jurczyk of Google Project Zero, Eddy Tsalolikhin, Johann Rehberger\n\nCVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan\n\nEntry updated October 26, 2026\n\n### ImageIO\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-64759: Musaab Khan (@bxff), XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine, Guannan Wang, Zhanpeng Liu, Jiashuo Liang, Guancheng Li, Iain Harkiss, Daniel Febrero\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86954: Mateusz Jurczyk of Google Project Zero\n\n### IOKit\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\n### IOMobileFrameBuffer\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\n### IOSurfaceAccelerator\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to leak sensitive kernel state\n\nDescription: An information leakage was addressed with additional validation.\n\nCVE-2026-64760: an anonymous researcher, Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence\n\n### iWork\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-65354: Csaba Fitzl (@theevilbit) of Iru\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: genter0, Svetoslav Stolarov, Josh Maine of Calif.io, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84566: Bernhard Jackiewicz\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65415: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ye Zhang (@VAR10CK) of Baidu Security\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A malicious app may be able to gain root privileges\n\nDescription: A permissions issue was addressed with additional restrictions.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Connecting to a malicious NFS server may disclose kernel memory\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to determine kernel memory layout\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved checks.\n\n### Kernel\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\nCVE-2026-86964: Ryan Hileman via Xint Code (xint.io)\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to execute arbitrary code with kernel privileges\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86916: Wang Yu\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: A remote attacker may be able to bypass firewall rules\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\nEntry added October 26, 2026\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84599: an anonymous researcher\n\nEntry added October 26, 2026\n\n### libarchive\n\nAvailable for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\n### Managed Configuration\n\nAvailable for: iPho","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27515,"url":"https://support.apple.com/en-us/149035","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27516,"url":"https://support.apple.com/en-us/149036","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27521,"url":"https://support.apple.com/en-us/149037","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27527,"url":"https://support.apple.com/en-us/149038","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27518,"url":"https://support.apple.com/en-us/149042","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27519,"url":"https://support.apple.com/en-us/149043","title":"Vendor advisory: support.apple.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}