Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS vulnerabilities
22 known CVE vulnerabilities in Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS, translated and rated.
- CVE-2026-64733Critical
Data protection was improved. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to fingerprint the user.
- CVE-2026-64729Critical
Memory management was improved for a use-after-free issue. The issue affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. An app may be able to cause unexpected system termination.
- CVE-2026-64700Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43822Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43810Critical
The issue was addressed with improved memory handling. The vulnerability affects Apple systems and may allow a remote user to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43807Critical
A buffer overflow was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a malicious accessory to cause unexpected app termination.
- CVE-2026-43803Critical
An out-of-bounds write issue was addressed with improved bounds checking. The vulnerability affects Apple systems and may allow a remote attacker to cause unexpected system termination.
- CVE-2026-43799Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43778Critical
A use after free issue was addressed with improved memory management. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-43769Critical
An integer overflow was addressed with improved input validation. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination.
- CVE-2026-43730Critical
Permissions issue in Apple systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) allowing an app to fingerprint the user. Fixed with additional restrictions.
- CVE-2026-39868Critical
The issue was addressed with improved input validation. The vulnerability affects Apple systems and may allow an app to cause unexpected system termination or corrupt kernel memory.
- CVE-2026-64724Medium
A vulnerability in Apple systems, fixed with improved memory handling. An attacker on the local network may be able to cause a denial-of-service.
- CVE-2026-64721Medium
A vulnerability in Apple systems, fixed through improved state management. An app may be able to access sensitive user data.
- CVE-2026-64709Medium
The issue was addressed with improved memory handling. It affects Apple systems and may allow an app to disclose kernel memory.
- CVE-2026-64693Medium
A type confusion issue was addressed with improved checks. Processing a maliciously crafted image may lead to a denial-of-service.
- CVE-2026-43801Medium
This issue was addressed with improved checks. An app may be able to access sensitive user data.
- CVE-2026-43796Medium
This issue was addressed with improved data protection. An app may be able to read a persistent device identifier.
- CVE-2026-43780High
Improved input validation for integer overflow across multiple Apple systems. Processing a maliciously crafted texture may cause unexpected app termination.
- CVE-2026-43744Medium
An out-of-bounds write issue was addressed with improved bounds checking. Processing an audio stream in a maliciously crafted media file may terminate the process.
- CVE-2026-43714Medium
The issue was addressed with improved input sanitization. A malicious app may be able to access protected user data.
- CVE-2026-28983High
Type checking was improved in Apple systems. A remote attacker may be able to cause a denial of service.

