CVE-2026-65367

MediumCVSS 5.5

Published: 25/08/2026(UTC)Updated: 27/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

A null pointer dereference was addressed with improved input validation in iOS and iPadOS. An app may cause unexpected system termination.

Risk Assessment

A malicious app can crash the system, disrupting device operation and potentially causing data loss.

Recommendation

Update iOS/iPadOS to a patched version (18.7.9, 26.5).

Other vulnerabilities in Apple iOS/iPadOS

CVE-2026-43657Low
A permissions issue was addressed with additional restrictions in iOS and iPadOS. A malicious app may be able to enumerate installed apps.

Original NVD description (English source)

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination.