CVE-2026-65403
UnknownSummary
This issue was addressed with improved checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to access sensitive user data.
Risk Assessment
A malicious app could read confidential user data, resulting in a confidentiality breach. The risk applies to all Apple devices running vulnerable OS versions.
Recommendation
Update Apple devices to the latest OS versions (iOS/iPadOS 26.7 or 27, macOS Golden Gate 27, Sequoia 15.8, Tahoe 26.7, visionOS 27, watchOS 27).
Other vulnerabilities in Apple iOS/iPadOS/macOS/visionOS/watchOS
See all- CVE-2026-86870Unknown
A heap buffer overflow was addressed with improved bounds checking. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. Processing a maliciously crafted file may lead to unexpected app termination.
- CVE-2026-84625Unknown
A permissions issue was addressed with additional sandbox restrictions. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An app may be able to fingerprint the user.
- CVE-2026-65412Unknown
A null pointer dereference vulnerability in Apple systems, fixed with improved input validation. Processing web content may lead to a denial-of-service.
- CVE-2026-65399Unknown
A file quarantine bypass was addressed with additional checks. The vulnerability affects iOS, iPadOS, macOS, visionOS, and watchOS. An archive may be able to bypass Gatekeeper.
- CVE-2026-64734Medium
A vulnerability in Apple systems, fixed with improved checks. Processing a maliciously crafted contact may leak sensitive data.
Original NVD description (English source)
This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.