https://vulnogram.org/ Most recent CVEs assigned by Apple Inc. (apple). https://vulnogram.org/seaview/icons/apple.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-86981 https://vulnogram.org/CVE-2026-86981 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination. Medium Tue, 20 Oct 2026 00:50:57 GMT https://vulnogram.org/CVE-2026-86979 https://vulnogram.org/CVE-2026-86979 A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:57 GMT https://vulnogram.org/CVE-2026-86977 https://vulnogram.org/CVE-2026-86977 An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages. Tue, 20 Oct 2026 00:50:57 GMT https://vulnogram.org/CVE-2026-86976 https://vulnogram.org/CVE-2026-86976 An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:57 GMT https://vulnogram.org/CVE-2026-86975 https://vulnogram.org/CVE-2026-86975 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination. Medium Network Exploitable Tue, 20 Oct 2026 00:50:56 GMT https://vulnogram.org/CVE-2026-86963 https://vulnogram.org/CVE-2026-86963 A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network position may be able to cause a denial-of-service. Medium Network Exploitable Tue, 20 Oct 2026 00:50:56 GMT https://vulnogram.org/CVE-2026-86962 https://vulnogram.org/CVE-2026-86962 A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able… Medium Tue, 20 Oct 2026 00:50:56 GMT https://vulnogram.org/CVE-2026-86961 https://vulnogram.org/CVE-2026-86961 A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox. High Tue, 20 Oct 2026 00:50:55 GMT https://vulnogram.org/CVE-2026-86959 https://vulnogram.org/CVE-2026-86959 An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead… Tue, 20 Oct 2026 00:50:55 GMT https://vulnogram.org/CVE-2026-86957 https://vulnogram.org/CVE-2026-86957 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wir… Medium Tue, 20 Oct 2026 00:50:55 GMT https://vulnogram.org/CVE-2026-86955 https://vulnogram.org/CVE-2026-86955 An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:54 GMT https://vulnogram.org/CVE-2026-86953 https://vulnogram.org/CVE-2026-86953 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service. Medium Tue, 20 Oct 2026 00:50:54 GMT https://vulnogram.org/CVE-2026-86949 https://vulnogram.org/CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox. High Tue, 20 Oct 2026 00:50:54 GMT https://vulnogram.org/CVE-2026-86948 https://vulnogram.org/CVE-2026-86948 This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox. Tue, 20 Oct 2026 00:50:54 GMT https://vulnogram.org/CVE-2026-86944 https://vulnogram.org/CVE-2026-86944 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination. Tue, 20 Oct 2026 00:50:53 GMT https://vulnogram.org/CVE-2026-86940 https://vulnogram.org/CVE-2026-86940 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory. Medium Tue, 20 Oct 2026 00:50:53 GMT https://vulnogram.org/CVE-2026-86935 https://vulnogram.org/CVE-2026-86935 This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data. Tue, 20 Oct 2026 00:50:53 GMT https://vulnogram.org/CVE-2026-86933 https://vulnogram.org/CVE-2026-86933 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contacts. Low Tue, 20 Oct 2026 00:50:53 GMT https://vulnogram.org/CVE-2026-86932 https://vulnogram.org/CVE-2026-86932 An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:52 GMT https://vulnogram.org/CVE-2026-86928 https://vulnogram.org/CVE-2026-86928 A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data. Medium Tue, 20 Oct 2026 00:50:52 GMT https://vulnogram.org/CVE-2026-86922 https://vulnogram.org/CVE-2026-86922 A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution. High Network Exploitable Tue, 20 Oct 2026 00:50:52 GMT https://vulnogram.org/CVE-2026-86921 https://vulnogram.org/CVE-2026-86921 A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files. Medium Tue, 20 Oct 2026 00:50:51 GMT https://vulnogram.org/CVE-2026-86919 https://vulnogram.org/CVE-2026-86919 A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device… High Tue, 20 Oct 2026 00:50:51 GMT https://vulnogram.org/CVE-2026-86918 https://vulnogram.org/CVE-2026-86918 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app terminati… Medium Network Exploitable Tue, 20 Oct 2026 00:50:51 GMT https://vulnogram.org/CVE-2026-86915 https://vulnogram.org/CVE-2026-86915 A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination. Medium Tue, 20 Oct 2026 00:50:50 GMT https://vulnogram.org/CVE-2026-86914 https://vulnogram.org/CVE-2026-86914 An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive network connection information. Medium Tue, 20 Oct 2026 00:50:50 GMT https://vulnogram.org/CVE-2026-86913 https://vulnogram.org/CVE-2026-86913 A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a ma… Medium Network Exploitable Tue, 20 Oct 2026 00:50:50 GMT https://vulnogram.org/CVE-2026-86907 https://vulnogram.org/CVE-2026-86907 An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modify the System Keychain. Medium Tue, 20 Oct 2026 00:50:48 GMT https://vulnogram.org/CVE-2026-86875 https://vulnogram.org/CVE-2026-86875 An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination. Medium Network Exploitable Tue, 20 Oct 2026 00:50:44 GMT https://vulnogram.org/CVE-2026-86874 https://vulnogram.org/CVE-2026-86874 An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination. Low Tue, 20 Oct 2026 00:50:44 GMT https://vulnogram.org/CVE-2026-86872 https://vulnogram.org/CVE-2026-86872 A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior. Medium Network Exploitable Tue, 20 Oct 2026 00:50:44 GMT https://vulnogram.org/CVE-2026-86871 https://vulnogram.org/CVE-2026-86871 An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a network file server may be able to cause unexpected system termination… Medium Network Exploitable Tue, 20 Oct 2026 00:50:43 GMT https://vulnogram.org/CVE-2026-86868 https://vulnogram.org/CVE-2026-86868 An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to impersonate other users. Tue, 20 Oct 2026 00:50:42 GMT https://vulnogram.org/CVE-2026-84613 https://vulnogram.org/CVE-2026-84613 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker… Medium Tue, 20 Oct 2026 00:50:39 GMT https://vulnogram.org/CVE-2026-84582 https://vulnogram.org/CVE-2026-84582 A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data. Tue, 20 Oct 2026 00:50:37 GMT https://vulnogram.org/CVE-2026-84579 https://vulnogram.org/CVE-2026-84579 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution. Tue, 20 Oct 2026 00:50:37 GMT https://vulnogram.org/CVE-2026-84547 https://vulnogram.org/CVE-2026-84547 A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory. Low Tue, 20 Oct 2026 00:50:32 GMT https://vulnogram.org/CVE-2026-84508 https://vulnogram.org/CVE-2026-84508 This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data. Medium Tue, 20 Oct 2026 00:50:27 GMT https://vulnogram.org/CVE-2026-84490 https://vulnogram.org/CVE-2026-84490 This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass Digital ID authentication when iPhone Mirroring is active. Low Tue, 20 Oct 2026 00:50:26 GMT https://vulnogram.org/CVE-2026-65396 https://vulnogram.org/CVE-2026-65396 A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination. Medium Tue, 20 Oct 2026 00:50:23 GMT https://vulnogram.org/CVE-2026-65379 https://vulnogram.org/CVE-2026-65379 The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:22 GMT https://vulnogram.org/CVE-2026-65372 https://vulnogram.org/CVE-2026-65372 A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to bypass Privacy preferences. Medium Tue, 20 Oct 2026 00:50:20 GMT https://vulnogram.org/CVE-2026-65356 https://vulnogram.org/CVE-2026-65356 An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:18 GMT https://vulnogram.org/CVE-2026-28854 https://vulnogram.org/CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching. Tue, 20 Oct 2026 00:50:04 GMT https://vulnogram.org/CVE-2026-28853 https://vulnogram.org/CVE-2026-28853 The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges. High Tue, 20 Oct 2026 00:50:04 GMT https://vulnogram.org/CVE-2026-28850 https://vulnogram.org/CVE-2026-28850 An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data. Medium Tue, 20 Oct 2026 00:50:04 GMT https://vulnogram.org/CVE-2026-86950 https://vulnogram.org/CVE-2026-86950 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple… High Known Exploited Network Exploitable Mon, 28 Sep 2026 19:13:52 GMT https://vulnogram.org/CVE-2026-86934 https://vulnogram.org/CVE-2026-86934 An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. Th… Critical Network Exploitable Wed, 23 Sep 2026 17:20:20 GMT https://vulnogram.org/CVE-2026-86938 https://vulnogram.org/CVE-2026-86938 A DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator privileges by placing a malicious DLL file in the installer directory. This vulnerability is addressed… High Wed, 23 Sep 2026 17:20:19 GMT https://vulnogram.org/CVE-2026-86926 https://vulnogram.org/CVE-2026-86926 A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is a… High Wed, 23 Sep 2026 17:20:18 GMT