Back to search

Apple

iOS

Apple operating system for iPhone.

27 Switch to this train 26 Switch to this train 18 Switch to this train 17 EOL Switch to this train 16 Switch to this train 15 Current train
Current version
Last checked: 2026-10-20

15.8.8

Release date
May 11, 2026
Security status
Current version appears affected by 100 high-severity CVEs.

Source

endoflife.date

Public release notes are linked for the latest stored release.

View release notes Subscribe to updates

Release history

See the latest published releases stored for this product.

Version Published Notes
15.8.8 2026-05-11 Release Notes

Vulnerability tracking

versionPing monitors CVEs for this product. Matching CVEs are listed below. We only display CVEs with a CVSS score of 7.0 or higher that were published within the last 90 days.

Affected status is inferred from published affected version ranges where available. Always verify against the vendor advisory before making production decisions.

CVE Severity Published Status Summary
CVE-2026-86950 HIGH (8.8) 2026-09-28 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7.1
CVE-2026-28960 HIGH (7.5) 2026-09-14 Current versionaffected

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
CVE-2026-43686 HIGH (8.8) 2026-09-14 Current versionaffected

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84575 HIGH (7.8) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-86895 HIGH (7.5) 2026-09-14 Current versionaffected

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84611 HIGH (7.3) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84607 HIGH (7.8) 2026-09-14 Current versionaffected

A race condition was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to execute arbitrary code with kernel privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-86904 HIGH (7.5) 2026-09-14 Current versionaffected

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84606 HIGH (7.5) 2026-09-14 Current versionaffected

A privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to identify a user across reinstalls.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-64761 HIGH (7.5) 2026-09-14 Current versionaffected

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to identify what other apps a user has installed.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-64736 HIGH (7.1) 2026-09-14 Current versionaffected

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-65415 HIGH (8.1) 2026-09-14 Current versionaffected

A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65398 HIGH (7.8) 2026-09-14 Current versionaffected

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84620 HIGH (7.3) 2026-09-14 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65357 HIGH (7.8) 2026-09-14 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-65414 CRITICAL (9.8) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65354 HIGH (8.2) 2026-09-14 Current versionaffected

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-64752 HIGH (7.3) 2026-09-14 Current versionaffected

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-20683 HIGH (7.1) 2026-09-14 Current versionaffected

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84623 HIGH (7.5) 2026-09-14 Current versionaffected

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84566 HIGH (8.4) 2026-09-14 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local attacker may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65359 HIGH (7.1) 2026-09-14 Current versionaffected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84507 HIGH (7.8) 2026-09-14 Current versionaffected

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84546 HIGH (8.4) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84511 HIGH (7.8) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog may lead to unexpected process termination.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84497 HIGH (7.8) 2026-09-14 Current versionaffected

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Opening a maliciously crafted file may lead to unexpected process termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84598 HIGH (7.5) 2026-09-14 Current versionaffected

A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a trust-paired device may be able to read and write arbitrary files.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84609 CRITICAL (9.8) 2026-09-14 Current versionaffected

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-43684 HIGH (7.8) 2026-09-14 Current versionaffected

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
CVE-2026-84561 CRITICAL (9.8) 2026-09-14 Current versionaffected

A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-28935 HIGH (7.5) 2026-09-14 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-43702 HIGH (7.8) 2026-09-14 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
  • From (including) 0 - Up to (excluding) 26.7
CVE-2026-84625 CRITICAL (9.1) 2026-09-14 Current versionaffected

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-43688 HIGH (7.8) 2026-09-14 Current versionaffected

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing a maliciously crafted file may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65344 HIGH (7.8) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65391 HIGH (8.8) 2026-09-14 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-86881 CRITICAL (9.1) 2026-09-14 Current versionaffected

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84629 HIGH (7.5) 2026-09-14 Current versionaffected

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 27
CVE-2026-65390 HIGH (8.8) 2026-09-14 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-65410 HIGH (7.5) 2026-09-14 Current versionaffected

The issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-28938 HIGH (7.5) 2026-09-14 Current versionaffected

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43689 HIGH (7.8) 2026-09-14 Current versionaffected

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-84632 HIGH (7.3) 2026-09-14 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.7
  • From (including) 0 - Up to (excluding) 27
CVE-2026-43670 HIGH (8.8) 2026-08-25 Current versionaffected

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.9
  • From (including) 0 - Up to (excluding) 26.5
CVE-2026-43794 HIGH (8.8) 2026-08-17 Current versionaffected

A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-65346 HIGH (8.8) 2026-08-17 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Processing an image may lead to arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-65343 HIGH (7.5) 2026-08-17 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6.1
CVE-2026-43757 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
CVE-2026-43805 CRITICAL (9.8) 2026-07-27 Current versionaffected

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43813 HIGH (7.1) 2026-07-27 Current versionaffected

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64740 CRITICAL (9.3) 2026-07-27 Current versionaffected

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43673 HIGH (7.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted audio file may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64783 HIGH (8.8) 2026-07-27 Current versionaffected

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43809 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
CVE-2026-43799 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43776 HIGH (7.8) 2026-07-27 Current versionaffected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64716 HIGH (7.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64700 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64757 HIGH (8.8) 2026-07-27 Current versionaffected

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64720 CRITICAL (9.8) 2026-07-27 Current versionaffected

A race condition was addressed with improved state handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43812 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64746 CRITICAL (9.8) 2026-07-27 Current versionaffected

An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. An app may be able to add contacts without user authorization.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43730 CRITICAL (9.8) 2026-07-27 Current versionaffected

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28931 HIGH (8.8) 2026-07-27 Current versionaffected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64766 HIGH (7.8) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43803 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64770 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64726 CRITICAL (9.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64771 CRITICAL (9.8) 2026-07-27 Current versionaffected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43814 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43802 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
CVE-2026-43711 HIGH (7.8) 2026-07-27 Current versionaffected

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted video file may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43818 HIGH (8.8) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28896 HIGH (7.7) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be able to cause unexpected system termination or read kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.4
CVE-2026-43822 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64747 HIGH (7.8) 2026-07-27 Current versionaffected

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64751 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64729 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64768 HIGH (8.1) 2026-07-27 Current versionaffected

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may cause an unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64695 CRITICAL (9.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
CVE-2026-64713 HIGH (8.1) 2026-07-27 Current versionaffected

This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Websites may know if the user has visited a given link.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64725 HIGH (7.1) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64772 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-39877 HIGH (7.8) 2026-07-27 Current versionaffected

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to disclose kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.5
CVE-2026-64764 HIGH (7.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43769 CRITICAL (9.8) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64733 CRITICAL (9.8) 2026-07-27 Current versionaffected

This issue was addressed with improved data protection. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to fingerprint the user.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28973 HIGH (8.6) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, watchOS 26.6. A malicious app may be able to break out of its sandbox.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64749 HIGH (7.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, visionOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64765 HIGH (7.8) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43729 HIGH (7.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. Processing a maliciously crafted image may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-28928 CRITICAL (9.8) 2026-07-27 Current versionaffected

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43748 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43733 HIGH (7.8) 2026-07-27 Current versionaffected

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a maliciously crafted image may corrupt process memory.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64769 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64774 CRITICAL (9.8) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-43807 CRITICAL (9.8) 2026-07-27 Current versionaffected

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. A malicious accessory may be able to cause unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.5.2
CVE-2026-64762 CRITICAL (9.8) 2026-07-27 Current versionaffected

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
CVE-2026-43780 HIGH (7.8) 2026-07-27 Current versionaffected

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted texture may lead to unexpected app termination.

Affected versions
  • From (including) 0 - Up to (excluding) 26.6
CVE-2026-64719 HIGH (8.1) 2026-07-27 Current versionaffected

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Affected versions
  • From (including) 0 - Up to (excluding) 18.7.10
  • From (including) 0 - Up to (excluding) 26.6

315 further matching CVEs are not displayed. The table shows the 100 most relevant of 415, recently published first.