What is the CVSS score of EUVD-2026-60504?

EUVD-2026-60504 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-60504?

Yes, a patch is available for EUVD-2026-60504. Update the affected software to the latest version immediately.

iOS and iPadOS EUVD-2026-60504

| CVE-2026-65330 MEDIUM

Buffer Overflow (CWE-119)

2026-08-17 apple

GHSA-hxmq-fcwj-hhfh

Buffer Overflow Apple Ios And Ipados

6.5

CVSS 3.1 · Vendor: apple

Severity by source

Vendor (apple) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

vuln.today AI

8.2 HIGH

AV:L chosen because exploitation requires local app execution; S:C and I:H reflect kernel memory corruption affecting system-wide integrity beyond the app sandbox.

3.1 AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Primary rating from Vendor (apple).

CVSS VectorVendor: apple

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 18, 2026 - 14:35 vuln.today

CVSS changed

Aug 18, 2026 - 14:22 NVD

6.5 (MEDIUM)

Patch available

Aug 17, 2026 - 22:03 EUVD

CVE Published

Aug 17, 2026 - 21:31 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 17, 2026 - 21:31 cve.org

MEDIUM 6.5

DescriptionCVE.org

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

AnalysisAI

Kernel memory corruption in Apple iOS, iPadOS, and macOS Tahoe allows a malicious app to cause unexpected system termination or corrupt kernel memory through improper memory buffer handling. Affected versions are iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple having released patches via security advisories at support.apple.com. No public exploit code has been identified and EPSS stands at 0.15% (5th percentile), indicating low observed exploitation probability at time of analysis.

Technical ContextAI

The vulnerability is rooted in CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), commonly manifesting as a buffer overflow or out-of-bounds memory write in kernel-level memory handling routines. The 'Buffer Overflow' tag and Apple's advisory language 'improved memory handling' confirm a memory safety defect in kernel subsystems shared across iOS, iPadOS, and macOS Tahoe. Affected products are identified via CPE as cpe:2.3:a:apple:ios_and_ipados and cpe:2.3:a:apple:macos, covering all versions of iOS/iPadOS below 26.6.1 and macOS Tahoe below 26.6.2. Because the flaw resides in kernel memory management, exploitation could affect process isolation and system stability across the entire device.

RemediationAI

The primary fix is to update to iOS 26.6.1 or iPadOS 26.6.1 (for iPhone and iPad devices) and macOS Tahoe 26.6.2 (for Mac systems) via Settings > General > Software Update or System Settings > General > Software Update, respectively. Apple's official advisories at https://support.apple.com/en-us/148281 and https://support.apple.com/en-us/148282 should be consulted for full details. No workaround is documented that eliminates the kernel memory handling flaw; enterprise mobile device management (MDM) teams may consider restricting installation of untrusted or sideloaded applications as a partial compensating control, though this does not address the root cause and does not protect against malicious App Store apps that exploit the flaw prior to Apple's review detection. Patching remains the only confirmed remediation.