CVE-2026-64772

CriticalCVSS 9.8

Published: 27/07/2026(UTC)Updated: 29/07/2026(UTC)Translated: 28/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

An out-of-bounds write vulnerability allows a remote attacker to cause unexpected application termination or heap corruption.

Risk Assessment

Risk involves potential remote code execution or system destabilization by an unauthenticated attacker.

Recommendation

Immediately update to iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6.

Original NVD description (English source)

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.