CVE-2026-64744
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
An information leakage vulnerability in Apple systems, fixed with additional validation. An app may be able to disclose kernel memory.
Risk Assessment
Kernel memory disclosure could allow an attacker to obtain sensitive system information, potentially facilitating further attacks.
Recommendation
It is recommended to update systems to the versions mentioned in the description to prevent kernel memory disclosure.
Other vulnerabilities in Apple iOS/iPadOS/macOS
See all- CVE-2026-64762Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64738Critical
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.
- CVE-2026-64695Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43757Critical
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-65349Medium
An out-of-bounds read was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
- CVE-2026-65347Medium
The issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to a denial-of-service.
- CVE-2026-65346High
An integer overflow was addressed with improved input validation. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. Processing an image may lead to arbitrary code execution.
- CVE-2026-65343High
A use after free issue was addressed with improved memory management. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. A remote attacker may be able to cause unexpected system termination.
- CVE-2026-65339Medium
A logic issue was addressed with improved checks. It affects iOS 26.6.1, iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to leak sensitive user information.
- CVE-2026-65330Medium
The issue was addressed with improved memory handling. The fix is available in iOS 26.6.1 and iPadOS 26.6.1, and macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Original NVD description (English source)
An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to disclose kernel memory.