CVE-2026-65350
Low risk· EPSS 15%Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A use-after-free issue was addressed with improved memory management. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may cause unexpected system termination or corrupt kernel memory.
Risk Assessment
Kernel memory corruption can lead to system crashes or potentially be exploited for code execution. This poses a serious threat to device stability and security.
Recommendation
Update all listed Apple systems to the fixed versions. Prioritize devices with access to sensitive data.
Other vulnerabilities in iOS, iPadOS, macOS, tvOS, visionOS, watchOS
See all- CVE-2026-113950Medium
An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.
- CVE-2026-112546Low risk· EPSS 12%
An out-of-bounds read was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-112518Low risk· EPSS 13%
A signature validation issue in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed with improved checks. An attacker in a privileged network position may be able to impersonate a Kerberos KDC.
- CVE-2026-112501Low risk· EPSS 14%
A race condition was addressed with improved state handling. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2, and an app may be able to cause unexpected system termination.
- CVE-2026-112477Low risk· EPSS 14%
A race condition was addressed with improved locking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112476Low risk· EPSS 14%
An out-of-bounds read was addressed with improved bounds checking. An app may be able to cause unexpected system termination.
- CVE-2026-112474Low risk· EPSS 13%
A use-after-free issue was addressed with improved memory management. An app may be able to cause unexpected system termination or write kernel memory.
- CVE-2026-112470Low risk· EPSS 14%
An out-of-bounds write issue was addressed with improved bounds checking. An app may be able to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-112446Low risk· EPSS 14%
This issue was addressed with additional entitlement checks. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27 and 27.2, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27.2, visionOS 27.2, and watchOS 27.2. An app may be able to access sensitive user data.
- CVE-2026-43668High
A use after free issue was addressed with improved memory management. This issue is fixed in several versions of Apple operating systems.
Original NVD description (English source)
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS