CVE-2026-64695
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
Risk Assessment
A remote attacker may cause system crashes or kernel memory corruption, potentially leading to service disruptions.
Recommendation
It is recommended to install the available Apple system updates mentioned in the description as soon as possible.
Other vulnerabilities in Apple iOS/iPadOS/macOS
See all- CVE-2026-64762Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64738Critical
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
- CVE-2026-43757Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-86924Low risk· EPSS 5%
A memory corruption issue was addressed with improved input validation. The flaw affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.
- CVE-2026-86869Low risk· EPSS 5%
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, and macOS. Processing a maliciously crafted image may lead to unexpected app termination.
- CVE-2026-84621Low risk· EPSS 9%
An authorization issue was addressed with improved access control. This affects iOS, iPadOS, and macOS. An app may be able to access sensitive user data.
- CVE-2026-84566Low risk· EPSS 6%
A memory handling issue in Apple systems allows a local attacker to cause unexpected system termination or corrupt kernel memory. The flaw was fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
- CVE-2026-84531Low risk· EPSS 5%
An out-of-bounds write issue in Apple systems was addressed with improved bounds checking. Processing maliciously crafted NTLM input may lead to unexpected app termination.
- CVE-2026-84519Medium
An out-of-bounds write vulnerability in Apple systems, fixed by improved bounds checking. Mounting a disk image with maliciously crafted files may lead to unexpected system termination.
- CVE-2026-84510Low risk· EPSS 9%
A heap buffer overflow was addressed with improved bounds checking. Mounting a maliciously crafted volume may lead to unexpected system termination.
Original NVD description (English source)
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A remote user may be able to cause unexpected system termination or corrupt kernel memory.