CVE-2026-64734
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A vulnerability in Apple systems, fixed with improved checks. Processing a maliciously crafted contact may leak sensitive data.
Risk Assessment
Sensitive data leakage could expose personal or other confidential information within the organization.
Recommendation
It is recommended to update systems to the versions mentioned in the description to prevent potential data leakage.
Other vulnerabilities in Apple iOS/iPadOS/macOS/visionOS/watchOS
See all- CVE-2026-86870Unknown
A heap buffer overflow was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-84625Unknown
A permissions issue was addressed with additional sandbox restrictions. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to fingerprint the user.
- CVE-2026-65412Unknown
A null pointer dereference vulnerability in Apple systems, fixed with improved input validation. Processing web content may lead to a denial-of-service.
- CVE-2026-65403Unknown
This issue was addressed with improved checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to access sensitive user data.
- CVE-2026-65399Unknown
A file quarantine bypass was addressed with additional checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An archive may be able to bypass Gatekeeper.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted contact may leak sensitive data.