CVE-2026-65344
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app termination.
Risk Assessment
Opening a malicious video file may cause an app crash and potentially further memory corruption effects.
Recommendation
Update systems to the specified versions (iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27).
Other vulnerabilities in iOS, iPadOS, macOS, tvOS, visionOS
See all- CVE-2026-112469Low risk· EPSS 13%
An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-28940High
The issue concerns improper memory handling that may lead to process memory corruption when processing a maliciously crafted image. It has been fixed in several versions of Apple operating systems.
Original NVD description (English source)
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted video file may lead to unexpected app termination.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS