Ios And Ipados
Monthly
Apple iOS 18.7.10 and iPadOS 18.7.10 ship a fix for an input-validation flaw (CWE-20) that lets a remote attacker crash or otherwise deny service on unpatched devices, with Apple rating the impact as a full availability loss (CVSS 7.5, AV:N/AC:L/PR:N/UI:N/A:H). Every iPhone or iPad still running a version below 18.7.10 is potentially affected. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so this is currently a patch-promptly issue rather than an emergency.
Race condition in Apple's kernel state management lets a malicious sandboxed app escape its sandbox and execute arbitrary code with kernel privileges on iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Exploitation requires a timing window to be won (CVSS AC:H) but no user interaction beyond launching the app, and success yields full control of the affected device. Apple shipped fixes in iOS/iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27; no public exploit code or CISA KEV listing was present in the provided data, and no EPSS
We need answer JSON only. Need carefully construct fields. Need follow instructions. Must use all data. Need risk_assessment include "inowroclaw" once naturally. Need not mention editorial note. Need product_name 1-3 words. Vulnerability affects Apple multiple OSes. Primary product? "Apple iOS" maybe? Description lists iOS/iPadOS/macOS/tvOS/visionOS/watchOS. Product_name could be "Apple iOS" but affects multiple. Maybe "Apple OS"? Need 1-3 words. CPE is apple:ios_and_ipados, macos, tvos, visionos, watchos. Product name: "Apple iOS" or "Apple Operating Systems"? Specific product? The issue maybe in some component? Description doesn't say. Use "Apple iOS" as primary? But multiple. Could use "Apple OS". Need 1-3 words. I'd choose "Apple OS" maybe broad. Or "Apple iOS" given first. Product_name "Apple OS" acceptable? It says specific product or service name, not vendor alone. Multiple products, pick primary. Apple iOS and iPadOS? The CPE includes ios_and_ipados. primary "Apple iOS". Need relevant. Summary: original synthesis. Mention out-of-bounds write in OS component, remote attacker can cause app termination or arbitrary code execution. Affected versions. KEV? Not provided. POC? Not provided. EPSS? Not provided. Need mention if actively exploited, if POC exists, EPSS risk if notable. Since no KEV, POC, EPSS absent. Say no public exploit identified at time of analysis; KEV absent. But do not start with "A vulnerability". Start with specific impact verb and product: "Remote code execution in Apple operating systems due to an out-of-bounds write..." But description says may cause unexpected app termination or arbitrary code execution. Use "Out-of-bounds write in Apple OS...". Need not copy description exactly. Say affects iOS/iPadOS before etc. Let's craft. Need technical_context: underlying technology/library/protocol involved. Not specified. Root cause CWE-787 Out-of-bounds write. Explain memory corruption. CPE exact affected products. Apple OSes. Need be educationa
Memory corruption in Apple's image-handling code across iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27 allows an attacker to achieve arbitrary code execution when a user processes a maliciously crafted image. Apple removed the vulnerable code entirely in the 27-generation releases, which are the only versions containing the fix; all earlier supported builds remain affected. The flaw is rated 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), meaning exploitation needs local positioning plus some user interaction, and there is no public exploit code or CISA KEV entry identified at time of analysis.
A local privilege-escalation flaw in Apple's operating system family lets a malicious app already running on the device obtain root privileges by exploiting a missing authorization check. Apple addressed the issue with 'additional restrictions' in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27, and the CVSS 3.1 score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation is not confirmed: the issue is not in CISA KEV, no public exploit code is identified, and CISA's SSVC assessment lists exploitation as 'none' and automatable as 'no', though technical impact is rated 'total' once root is achieved.
Content Security Policy enforcement failure in Safari's AudioWorklet contexts allows remote attackers to bypass CSP restrictions when a user processes maliciously crafted web content. Affected platforms include Safari before 26.5, iOS and iPadOS before 18.7.9/26.5, and macOS Tahoe before 26.5. Apple has released patches across all affected platforms; no public exploit or CISA KEV listing is identified at time of analysis.
Memory corruption in Apple's web content rendering engine affects iOS, iPadOS, and macOS Tahoe, enabling high-impact device compromise when a user processes maliciously crafted web content. All iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe versions prior to 26.6.2, are confirmed affected per Apple security advisories and EUVD-2026-60510. Apple has released patched builds across all affected branches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Integer overflow in Apple's image processing subsystem across iOS, iPadOS, and macOS Tahoe allows arbitrary code execution when a user processes a maliciously crafted image. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple releasing out-of-band point releases indicating urgency. No public exploit has been identified at time of analysis, but the CVSS 8.8 score and SSVC total technical impact rating place this among high-priority patching targets given Apple's massive consumer and enterprise device footprint.
Remote denial-of-service in Apple iOS, iPadOS, and macOS Tahoe exploits a use-after-free memory corruption flaw, allowing an unauthenticated remote attacker to trigger unexpected system termination without user interaction. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, as confirmed by Apple security advisories. No public exploit code or active exploitation has been identified at time of analysis, but the network-accessible, zero-interaction attack surface presents a meaningful availability risk for all unpatched Apple devices.
Kernel memory corruption via race condition in Apple OS allows a malicious app to write arbitrary kernel memory or cause unexpected system termination. The issue affects iOS, iPadOS, macOS, and watchOS versions prior to the June 2026 security fixes, and has been patched by Apple. No public exploit or active exploitation is known, and EPSS indicates a low probability of widespread exploitation at this time.
A code signing enforcement bypass in Apple operating systems allows a maliciously crafted app to execute with high confidentiality and integrity impact. No active exploitation is reported, and the EPSS score of 0.17% indicates a low probability of weaponization. Apple has released patches in version 26.6 for all affected platforms.
A sandbox escape vulnerability in Apple operating systems allows a malicious app to break out of its containment and gain full access to the device. Affected versions include iOS and iPadOS prior to 26.6, multiple macOS versions (Sonoma before 14.8.8, Sequoia before 15.7.8, Tahoe before 26.6), and tvOS before 26.6. No public exploit or active exploitation has been identified, and EPSS indicates a low probability of real-world attacks.
Memory corruption in Apple's audio processing framework affects iOS, iPadOS, macOS (Sonoma, Sequoia, Tahoe), tvOS, visionOS, and watchOS, where parsing a maliciously crafted audio file can corrupt process memory and potentially lead to arbitrary code execution. The flaw requires a victim to open or process the malicious file (local vector, user interaction) but no prior privileges. Apple has shipped fixes across all platforms; no public exploit identified at time of analysis and EPSS is low (0.16%).
Use-after-free vulnerability in Safari’s web content processing allows remote attackers to execute arbitrary code on affected Apple devices when a user visits a malicious website. Affected versions include Safari prior to 26.6, iOS and iPadOS prior to 26.6, macOS Tahoe prior to 26.6, visionOS prior to 26.6, and watchOS prior to 26.6. No public exploit or active exploitation has been identified, and EPSS indicates a low probability of exploitation (0.13%).
Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Sequoia before 15.7.8, macOS Sonoma before 14.8.8, macOS Tahoe/tvOS/visionOS/watchOS before 26.6 - where a use-after-free (CWE-416) lets a locally installed app crash the system. There is no public exploit identified at time of analysis and the NVD CVSS 9.8 (C:H/I:H/A:H) conflicts with Apple's own description, which states only 'unexpected system termination' (availability impact), suggesting the true impact is a DoS crash rather than full compromise. EPSS is low (0.17%, 6th percentile) and the issue is not in CISA KEV.
Arbitrary code execution via buffer overflow in Apple iOS, iPadOS, and macOS. Processing a maliciously crafted file can
Memory corruption in Apple's cross-platform image-processing stack allows a maliciously crafted image to corrupt process memory across iOS/iPadOS, macOS, tvOS, visionOS, and watchOS. Apple self-reported and patched the flaw (fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and the 26.6 releases of tvOS/visionOS/watchOS). No public exploit identified at time of analysis; EPSS is low (0.17%, 6th percentile) and CISA SSVC records exploitation status as none, though the technical impact is rated total.
Local denial-of-service in Apple operating systems via a use-after-free vulnerability allows an app to cause unexpected system termination. Affected versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. While the NVD assigns CVSS 9.8, the actual impact is limited to availability; no active exploitation or public exploit code is identified, and EPSS indicates very low exploitation probability (0.17%).
Memory corruption in Apple Safari 26.x allows remote code execution via processing maliciously crafted web content. This buffer overflow (CWE-119) affects all Apple platforms—iOS, iPadOS, macOS, visionOS, and watchOS—requiring user interaction to visit a malicious webpage. While the CVSS score is critical (8.8), EPSS (0.13%) indicates low current exploitation probability and no KEV listing or public exploit exists.
A race condition in Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS) fixed in version 26.6 allows a local malicious app to cause unexpected system termination, resulting in a denial-of-service condition. No evidence of active exploitation or public exploit code exists, and EPSS indicates very low exploitation probability (0.16%). The NVD-assigned CVSS 9.8 appears inconsistent with the actual impact, which is limited to availability.
Unexpected system termination in iOS and iPadOS prior to 26.6, as well as in certain versions of macOS, tvOS, and visionOS, resulting from a use-after-free memory corruption. Apple's description indicates a local denial-of-service where a malicious app can crash the system, while the NVD-assigned CVSS 9.8 erroneously implies unauthenticated remote code execution. A patch is available, no active exploitation has been reported, and EPSS suggests a very low probability of wide exploitation.
Missing authorization in Apple's Contacts framework across iOS/iPadOS, macOS Tahoe, visionOS, and watchOS (all versions before 26.6) allows an installed app to add contact entries without triggering the user's authorization prompt. Apple fixed the flaw with improved validation in the 26.6 releases. There is no public exploit identified at time of analysis and it is not on CISA KEV; EPSS is low at 0.16% (6th percentile), consistent with a low-severity local privacy-scope bypass despite the input's inflated 9.8 score.
User fingerprinting in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to collect device or user identifiers due to a permissions issue. All versions prior to the 26.6 updates are affected. No public exploit code or active exploitation has been identified, and EPSS indicates a low 0.15% probability of exploitation.
Kernel memory corruption in Apple XNU kernel allows a remote attacker to potentially execute arbitrary code or crash the system when a victim connects to a malicious NFS server. Affected are all Apple operating systems—iOS, iPadOS, macOS, tvOS, and watchOS—before version 26.6. No active exploitation or public exploit code has been observed, and EPSS indicates a low probability of widespread attacks.
Processing a maliciously crafted file on unpatched Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS, visionOS) may allow arbitrary code execution due to an integer overflow in file handling. The vulnerability affects all versions prior to the latest OS updates and requires user interaction (opening a file) to trigger. No active exploitation or public exploit code has been identified, and patches are available in the vendor-released updates.
Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be triggered by a remote attacker via an out-of-bounds write. The issue, patched in the latest OS updates, carries a CVSS base score of 9.8 but is not known to be actively exploited. EPSS estimates a low 0.25% probability of exploitation, and no public exploit code has been identified.
Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6 allows unauthenticated network attackers to corrupt heap memory via an out-of-bounds write. This can lead to arbitrary code execution or unexpected application termination, compromising the affected device
Physical-proximity memory corruption in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS, visionOS) allows a nearby attacker to corrupt process memory, potentially leading to arbitrary code execution or denial of service. No active exploitation is known, and vendor-released patches are available. EPSS score is low (0.16%), and the CVSS vector supplied (AV:N) conflicts with the required physical proximity.
Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause application termination or arbitrary code execution. Affected products include iOS and iPadOS prior to version 26.6, macOS before Sequoia 15.7.8 and Tahoe 26.6, tvOS before 26.6, and visionOS before 26.6; no active exploitation or public proof-of-concept has been reported.
We need to produce a JSON analysis. We have CVE-2026-43814. Description: use after free in Apple's operating systems (iOS, iPadOS, macOS, tvOS, watchOS), fixed in versions 26.6. CVSS is 9.8 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-416 use after free. EPSS 0.16%, low. No KEV mention, so not in KEV. Tags: Denial of Service, Apple, etc. But description says "app may be able to cause unexpected system termination" -> that's a crash/DoS. The CVSS suggests network, no privs, high impact on CIA. That seems contradictory: a network attack causing system termination by an app? It might be that the vulnerability is in some system component that an app can trigger, and the app could be network-facing? Or maybe CVSS is wrong. Let's synthesize. We must produce product_name: 1-3 words: "iOS and iPadOS" ... but includes multiple. Affected products: many. Primary product? I'd say "Apple OS Family" not appropriate? The description says "iOS and iPadOS", "macOS", "tvOS", "watchOS". I'll pick the most prominent: "iOS and iPadOS" or "Apple OS" but we need 1-3 words. "iOS and iPadOS" is 3 words. That works, includes the primary. Or "Apple Operating Systems" but that's generic. I'll use "iOS and iPadOS" since it's first listed and likely the most used. But the vulnerability spans all. I'll go with "Apple OS Family"? That's 3 words: Apple OS Family. I think product_name: "Apple OS Family" (or "Apple iOS/macOS"). The instruction says "If multiple products, pick the primary one." The primary might be iOS. So "iOS". But then the summary might need to clarify. I'll pick "iOS" as the most common, and mention others. In product_name, "iOS" is 1 word. That might simplify. I'll go with "iOS" but technically the vulnerability is in iOS, iPadOS, macOS, tvOS, watchOS. So I'll put "iOS and iPadOS" as two-word phrase? Actually three words. I'll put "iOS" as primary, but that's reductive. Let's think: The CPEs are separate: cpe:2.3:a:apple:ios_and_ipados:*:*, etc. The NVD often groups them
Processing a maliciously crafted video file may lead to memory corruption enabling possible arbitrary code execution on multiple Apple operating systems. Affected platforms include iOS, iPadOS, macOS, tvOS, watchOS, and visionOS; fixes are available in the latest updates (iOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6). User interaction is required to open the malicious video, and no public exploit or active exploitation is known at this time.
Arbitrary code execution in Apple iOS, iPadOS, and macOS arises when the OS image-processing pipeline handles a maliciously crafted image, triggering an integer overflow (CWE-190) that can be leveraged to run attacker-controlled code. The flaw affects iOS/iPadOS before 26.6 and multiple macOS trains (Sonoma before 14.8.8, Sequoia before 15.7.8, Tahoe before 26.6) and requires the victim to open or process the malicious image (UI:R). No public exploit has been identified at time of analysis, EPSS is low (0.18%, 7th percentile), and it is not listed in CISA KEV.
We need to output a JSON object with the specified fields, synthesizing from the provided CVE data. The input includes: CVE ID, description, CVSS score 9.8, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, CWE-416, EPSS 0.17% (6th percentile), patch available, tags: Denial Of Service, Apple, etc., SSVC: exploitation none, automatable yes, technical impact total. CPE strings, references to Apple support pages, affected versions from EUVD. The description says: "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination." Important: The impact phrase says "An app may be able to cause unexpected system termination." That sounds like a denial of service, not code execution. However, the CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which implies full confidentiality, integrity, availability impact. That seems contradictory because causing unexpected system termination would typically be A:H only, and perhaps C/I not impacted, or maybe the vulnerability is local (an app) and might require user interaction? The CVSS vector suggests network attack, no privileges, no user interaction, high impact on all three. That doesn't align with the description saying "An app may be able to cause unexpected system termination." The CVSS score might be from NVD or Apple, but the description suggests only a denial-of-service (system termination). Also tags include "Denial Of Service" but also "Memory Corruption", "Use After Free". Use-after-free can lead to code execution, but the description explicitly says "unexpected system termination". However, the CVSS vector implies total compromise. This discrepancy must be addressed in the analysis. We need to produce a synthesis. The request: "Return a JSON object ... CRITICAL: Do NOT copy or paraphrase the Descriptio
We are tasked with producing a JSON analysis for CVE-2026-64747. We must use all provided data, including EPSS, SSVC, patch availability, CPE, and tags. The vulnerability is a buffer overflow in Apple products, with an app potentially executing arbitrary code with kernel privileges. CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). CWE-120. Patch available from vendor. EPSS 0.19% (low). SSVC: Exploitation none, Automatable no, Technical impact total. KEV status? Not in input, so not KEV. POC? Not mentioned. Tags include RCE, Apple, Buffer Overflow, etc. Affected products: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. CPEs confirm. References are Apple support pages. We must produce fields: - product_name: 1-3 words, specific product. Since it spans many OSes, the "primary one"? The CVE description mentions iOS and iPadOS, macOS, tvOS, visionOS, watchOS. The common underlying component is likely the kernel or something. But the product is Apple's operating systems. Could say "Apple OS Family" or "Apple Kernel". The description says "An app may be able to execute arbitrary code with kernel privileges." So the vulnerability is in the kernel, accessible via an app. So product could be "Apple Kernel" or "Apple Operating Systems". But the instruction says "The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel'." So maybe "Apple Kernel". However, it's not explicitly named. The CPEs list specific products: ios_and_ipados, macos, tvos, visionos, watchos. So I'll use "Apple OS Family" but that is 3 words. "Apple Kernel" is 2 words. I'll go with "Apple Kernel" as the vulnerable component. The description isn't clear if it's the kernel itself or a system library, but "kernel privileges" suggests kernel execution. So "Apple Kernel" is appropriate. - summary: 2-3 sentences, original synthesis, avoid starting with "A vulnerability". Start with impact verb a
A use-after-free vulnerability in Apple operating systems allows a malicious app to cause unexpected system termination or write to kernel memory. The issue affects iOS
Denial of service in Apple iOS, macOS, and related operating systems due to a use-after-free flaw could allow a malicious app to crash the device. Apple's advisory only confirms unexpected system termination, but an independent CVSS score of 9.8 suggests potential for full system compromise; however, the CVSS vector appears inconsistent with the vendor description. The vulnerability is patched in versions 26.6 for all affected OSes, and no active exploitation or public exploit code is known.
Remote attackers can cause unexpected application termination and potentially read sensitive memory on affected Apple devices. This out-of-bounds read vulnerability, tracked as CVE-2026-64768, affects iOS, iPadOS, macOS, tvOS, and visionOS due to insufficient input validation. No active exploitation or public proof-of-concept code has been identified.
Information disclosure in Apple Safari and OS-integrated WebKit allows websites to detect if a user has visited specific URLs. Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to version 26.6 are affected. No public exploit code or active attacks have been reported, and the probability of exploitation is very low (EPSS 0.17%).
Denial-of-service vulnerability in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS due to an out-of-bounds write in a shared component. A malicious app executed locally can cause a system crash; the CVSS vector also suggests potential high confidentiality impact (memory disclosure), though the advisory only mentions denial-of-service. Fixed in updates; no active exploitation or public exploit code reported, and EPSS probability is very low (0.17%).
Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an out-of-bounds write bug. An unauthenticated attacker can trigger heap corruption by sending a malicious payload over the network, leading to unexpected application termination or potential arbitrary code execution with no user interaction required. Apple has released platform patches fixing this critical vulnerability, and while no active exploitation or public exploit is known, the EPSS score indicates low near-term exploitation
Arbitrary code execution via malicious file processing affects multiple Apple operating systems due to an out-of-bounds write. Fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No active exploitation or public exploit is known, and EPSS predicts a very low probability of real-world attacks.
Denial of service in Apple operating systems (iOS/iPadOS 26.6, macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS/visionOS/watchOS 26.6) allows a locally installed app to trigger an integer overflow that causes unexpected system termination. The flaw was reported and patched by Apple, and CISA's SSVC framework rates exploitation as 'none' with EPSS at just 0.17% (6th percentile), indicating no public exploit identified at time of analysis. Note a significant signal conflict: the NVD CVSS vector of 9.8 (AV:N, full C/I/A impact) is inconsistent with the description, which describes only an app-triggered crash.
A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An attacker can use this information disclosure vulnerability to track the user’s identity across different contexts, violating privacy. The issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, and no active exploitation or public exploit code has been observed.
Sandbox escape in Apple iOS/iPadOS, macOS, and watchOS lets a malicious application break out of its sandbox by triggering an integer overflow (CWE-190) in shared OS code, potentially gaining access beyond its permitted boundaries. Apple discovered and reported the issue and shipped fixes across its platform lineup; there is no public exploit identified at time of analysis, and CISA SSVC rates exploitation as none, though the total technical impact and scope change make it a meaningful local sandbox-escape risk. EPSS is low (0.16%, 6th percentile), consistent with no observed exploitation.
Memory corruption vulnerability in Apple operating system kernels (iOS, iPadOS, macOS, visionOS) arises from improper memory handling (CWE-119) and can be triggered by a locally installed application. Successful exploitation may allow an attacker to cause unexpected
Processing a maliciously crafted file on Apple operating systems can lead to arbitrary code execution due to an integer overflow vulnerability (CWE-190). Affected products include iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, all prior to their respective fixed versions. No public exploit code has been identified, and the EPSS score of 0.17% indicates a very low probability of near-term exploitation, though the impact could be severe.
Memory corruption vulnerability in Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS) allows an attacker with a maliciously crafted image to corrupt process memory, potentially leading to arbitrary code execution. The issue is fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8/macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. No active exploitation has been reported (CISA KEV not listed), and the EPSS score of 0.16% indicates low exploitation likelihood.
We need to generate a JSON object with specific fields, all plain text strings. Provided data: CVE-2026-28928, Apple vulnerability, use after free in iOS/iPadOS/macOS/tvOS/watchOS, fixed in version 26.6. Description: "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination." CVSS: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-416. EPSS 0.16% percentile 6%. Patch available. Reported by Apple. CPE strings: a:apple:ios_and_ipados:*, a:apple:macos:*, a:apple:tvos:*, a:apple:watchos:*. Tags: Denial Of Service, Apple, Ios And Ipados, Tvos, Watchos, Memory Corruption, Use After Free. SSVC: Exploitation none, Automatable yes, Technical Impact total. EUVD affected versions: macOS 0<26.6, watchOS 0<26.6, tvOS 0<26.6, iOS and iPadOS 0<26.6. References: support.apple.com pages. Now produce JSON. product_name: "3 words ONLY. The specific product or service name affected." That would be "iOS and iPadOS" possibly? But description covers multiple. The primary? Since all Apple OSes, we can say "Apple OS (iOS/macOS)"? The rule: "1-3 words ONLY. The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel', 'nginx-ui', 'GoAnywhere MFT'. NOT the vulnerability type, NOT the vendor alone, NOT a description. If multiple products, pick the primary one." Which primary? The CVE covers all Apple OS families: iOS, iPadOS, macOS, tvOS, watchOS. Probably best to say "Apple operating systems" or "Apple iOS/macOS". But need 1-3 words. "Apple OS" might be acceptable, but that's too generic. "iOS" alone? But the vulnerability isn't iOS-specific; it's across. I'll pick "Apple iOS, macOS" – 3 words. Or "Apple OSes". I'll go with "Apple OS" (2 words). The product_name field is for the product name. Since it's a cross-platform issue in Apple's core OS, I'll label it "Apple iOS and macOS" (4 words, too l
A memory corruption vulnerability in Apple iOS, iPadOS, and macOS when processing a crafted image can allow an attacker to corrupt process memory, potentially leading to arbitrary code execution. Exploitation requires local access and user interaction. Patches are available in iOS 26.6/iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6, and no active exploitation or public exploit code
Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected application termination or heap corruption via unspecified vectors. Given a CVSS score of 9.8, successful exploitation could lead to full system compromise. Patches are available from Apple in multiple OS updates, and no public exploit or active exploitation has been identified.
We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sources: CVE description, CVSS, EPSS, CPE, tags, references, ENISA data. The output must be plain text paragraphs, not arrays/objects. Let's analyze the input: - CVE-2026-64774 - Description: "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption." - CVSS Score: 9.8, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CWE: CWE-190 (Integer Overflow) - EPSS: 0.24%, percentile 16% (low) - Patch: Available from vendor (confirmed by description listing fixed versions) - Reported by: apple - CPE: multiple Apple products: iOS and iPadOS, macOS, tvOS, visionOS - Tags: Apple, Buffer Overflow, Ios And Ipados, Tvos, Visionos, Integer Overflow (note "Buffer Overflow" tag but it's integer overflow leading to heap corruption, maybe buffer overflow is a result) - ENISA EUVD: affected versions listed: macOS 0 <26.6, macOS 0 <15.7.8, iOS and iPadOS 0 <26.6, macOS 0 <14.8.8, visionOS 0 <26.6, tvOS 0 <26.6. It's weird: "macOS 0 <26.6" maybe means all macOS before 26.6? But they also mention specific Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6. So the affected versions are those prior to these specific fixed versions? - References: many Apple support URLs (128066 to 128072), likely each for a product. Given the description, the integer overflow exists in some component (maybe kernel, a library) across Apple operating systems. It can be triggered remotely by an attacker, leading to unexpected application termination (DoS) or heap corruption (potentially code execution). CVSS says complete confidentiality, integrity, availability impact, but EPSS is low, KEV not mentioned. No POC mentioned. Tags include "Buffer Overflow" which might
Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, watchOS, and visionOS, when processing a malicious accessory. The vulnerability stems from a buffer overflow (CWE-120) addressed with improved bounds checking in the latest updates. No active exploitation or public proof-of-concept is reported; EPSS score is low (0.18%), though the provided CVSS vector implies a critical network-based attack that does not align with the accessory requirement.
We need to produce a JSON object with all the required fields. The input provides: CVE-2026-43780, description, CVSS vector and score, CWE, EPSS, patch info, CPEs, tags, SSVC, EUVD info, affected versions, references. We must synthesize multi-source data. The CVE is about an integer overflow in iOS, iPadOS, macOS, tvOS, visionOS, watchOS when processing maliciously crafted texture. Fixed versions are given. Key tasks: ensure every field is a plain text string, no arrays or objects. Follow all precision rules. First, product_name: "iOS and iPadOS" (since that appears in the list, but it's a multi-product vulnerability. The instruction says "If multiple products, pick the primary one." The primary might be the overarching platform? The CPEs all start with apple. The product is a set of operating systems. Since the vulnerability is across many OS, maybe pick "Apple OS" or "Apple Operating Systems"? But the rule says 1-3 words, specific product. Could be "Apple iOS/iPadOS" but that's 2 words. I'll choose "Apple OS" as a collective term. However, the description mentions "iOS and iPadOS" first, then macos, etc. The most specific product name might be "iOS" as the representative. The rule says "NOT the vendor alone", so "Apple" isn't enough. "iOS" is a product. But vulnerability affects multiple products, but we need to pick the primary one. Since the title often says "iOS and iPadOS", it's a combo. I could say "iOS and iPadOS". That's 3 words. That's acceptable. I'll go with "iOS and iPadOS". Summary: Must not copy description. Must be original synthesis using all data. Start with impact verb and product. E.g., "Processing a maliciously crafted texture on Apple devices running iOS, iPadOS, macOS, tvOS, visionOS, or watchOS may cause an integer overflow leading to unexpected app termination." But need to mention CVSS, EPSS, POC status, KEV. No KEV here, no POC mentioned. So "no public exploit identified at time of analysis". EPSS score low (0.17%, percentile 6%). So s
Out-of-bounds read in Apple Safari's web content processing can crash the browser and potentially leak sensitive memory contents. This vulnerability affects all Apple platforms where Safari rendering is used and is fixed in Safari 26.6, iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Exploitation requires user interaction to visit a malicious site; no known active exploits or public proof-of-concept exist.
Memory corruption vulnerability in multiple Apple operating systems allows local attackers to achieve arbitrary code execution by processing a maliciously crafted file. Affected versions include iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to 26.6. No active exploitation has been confirmed, and patches are available.
Out-of-bounds write in Apple operating systems (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) allows an attacker to trigger memory corruption leading to unexpected application termination when a victim processes maliciously crafted content. The flaw affects all major Apple platforms below the fixed versions and was reported and patched by Apple. There is no public exploit identified at time of analysis, and EPSS exploitation probability is low (0.17%, 7th percentile).
Denial-of-service in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to trigger an out-of-bounds read, causing app crashes or system instability. The
Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability, a path handling flaw in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, enables a low-privileged application to traverse directories and elevate its permissions. No user interaction is required, and no active exploitation or public proof-of-concept has been identified at the time of analysis.
Arbitrary code execution in Apple iOS and iPadOS, macOS, tvOS, visionOS, and watchOS permits an attacker to run code or terminate apps by luring a user into opening a crafted file. The out-of-bounds write issue was fixed in all supported Apple operating systems via June 2026 updates. No active exploitation or public proof-of-concept has been reported at time of analysis, and EPSS indicates a low probability of future exploitation.
Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS/visionOS/watchOS 26.6) allows a remote user to trigger unexpected system termination (denial of service) or corrupt kernel memory, potentially leading to arbitrary code execution in kernel context. Apple addressed the flaw with improved memory handling and credited its own security team. There is no public exploit identified at time of analysis and EPSS probability is low (0.25%), but the CVSS 9.8 rating and CISA SSVC 'total' technical-impact assessment mark it as a high-severity kernel bug.
Unexpected system termination due to memory initialization flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious application to forcibly crash the device. All versions prior to the listed fixed releases are affected. No active exploitation or publicly available exploit code was identified at time of analysis; EPSS indicates a low (0.16%) probability of exploitation.
Kernel memory corruption in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to cause system termination or corrupt kernel memory. A use-after-free issue in the kernel’s memory management could be triggered by an app, leading to unexpected system behavior or potential code execution. Patches are available across all affected operating systems; no active exploitation has been observed.
Kernel memory corruption in Apple iOS/iPadOS (before 26.5.2) and macOS Tahoe (before 26.5.2) allows a malicious or compromised app to corrupt kernel memory or trigger unexpected system termination via malformed input that bypasses validation. Reported by Apple internally and fixed with improved input validation; no public exploit identified at time of analysis and the issue is not listed in CISA KEV. Despite a high CVSS of 9.1, the practical attack surface is bound to code already executing on the device as an app.
Sandbox escape in Apple's WebKit/Safari web content engine allows a malicious website to process restricted web content outside the sandbox on Safari, iOS/iPadOS, and macOS prior to 26.5.2. Reported by Apple and classed as an improper access-control flaw (CWE-284), it requires a victim to load attacker-controlled content (UI:R) and carries CVSS 7.1 with a scope change, reflecting that breaking out of the sandbox crosses a security boundary. There is no public exploit identified at time of analysis and EPSS is low (0.16%), though CISA's SSVC framework rates the technique as automatable with partial technical impact.
Memory corruption via use-after-free in Apple's WebKit browser engine allows remote attackers to corrupt memory when a victim processes maliciously crafted web content on Safari, iOS/iPadOS, or macOS prior to 26.5.2. The CVSS 3.1 score of 8.8 reflects network-reachable exploitation requiring only that a user open a malicious page; no public exploit is identified at time of analysis and the issue is not listed in CISA KEV. Successful exploitation typically serves as the initial stage of a browser-based attack chain (often paired with a sandbox escape) to achieve code execution in the renderer.
Local privilege escalation and kernel memory corruption in Apple iOS, iPadOS (before 26.5.2) and macOS Tahoe (before 26.5.2) allows a malicious or compromised app to write kernel memory or force unexpected system termination by supplying improperly validated input to a privileged interface. Apple resolved the flaw through improved input sanitization. There is no public exploit identified at time of analysis, EPSS is low (0.18%, 8th percentile), and CISA SSVC records exploitation status as none, though it rates the technical impact as total and considers it automatable.
Memory corruption via type confusion in Apple's WebKit browser engine allows attackers to corrupt memory by luring a victim to maliciously crafted web content, affecting Safari, iOS/iPadOS, and macOS before version 26.5.2. The flaw (CWE-843) is network-reachable but requires user interaction (visiting a page), and no public exploit has been identified at time of analysis. Apple has shipped patches across Safari 26.5.2, iOS/iPadOS 26.5.2, and macOS Tahoe 26.5.2.
Sandbox escape in Apple's WebKit browser engine (Safari, iOS/iPadOS, and macOS Tahoe before 26.5.2) lets a malicious website process restricted web content outside the browser sandbox, undermining the isolation that confines untrusted web pages. The flaw stems from improper input validation (CWE-20), was reported by Apple itself, and requires a victim to visit attacker-controlled content (UI:R); CVSS 7.1 reflects limited confidentiality, integrity, and availability impact across a changed scope. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Cross-origin data exfiltration in Apple's Safari/WebKit engine (Safari, iOS/iPadOS, and macOS Tahoe before 26.5.2) allows a malicious website to bypass the same-origin policy and read data belonging to other origins after a victim is lured into visiting it. Tracked under CWE-352 and rated CVSS 8.1, the flaw requires user interaction (visiting the attacker page) but no authentication or elevated privileges. No public exploit identified at time of analysis; EPSS is low at 0.17% and CISA SSVC records exploitation status as none.
Memory corruption in Apple's WebKit browser engine (Safari and the system WebView on iOS, iPadOS, and macOS before 26.5.2) allows a remote attacker to corrupt process memory when a victim loads maliciously crafted web content. The flaw is a use-after-free (CWE-416) and carries a CVSS 8.8 with required user interaction; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Apple reported and patched it in coordinated releases on 2026 advisories.
Denial-of-service in Apple iOS and iPadOS lets a remote attacker exhaust device resources through maliciously crafted input, degrading availability without compromising data confidentiality or integrity. All iOS/iPadOS builds before 18.7.9 and before 26.4 are affected, and Apple has shipped fixes in both trains. There is no public exploit identified at time of analysis, and EPSS exploitation probability is very low (0.05%, 17th percentile) despite the network-facing CVSS 7.5 rating.
Sandbox escape vulnerability in Apple operating systems allows malicious apps with low privileges to break out of application sandbox and execute code with elevated privileges on the host system. Affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS across multiple versions. Apple has released patches for all affected platforms. EPSS score of 0.02% (7th percentile) indicates low probability of mass exploitation in the wild, though the CVSS 8.8 score reflects significant potential impact if successfully weaponized. No active exploitation confirmed at time of analysis.
Type confusion vulnerability in Apple's operating systems allows remote unauthenticated attackers to trigger denial of service across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Apple has released patches addressing the issue in iOS/iPadOS 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The CVSS vector indicates network-accessible exploitation with low complexity and no privileges required, though EPSS score of 0.13% (32nd percentile) suggests relatively low likelihood of widespread exploitation. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Memory-corruption in Apple's operating-system file-processing components (iOS/iPadOS before 18.7.9, macOS Sequoia before 15.7.7, macOS Tahoe before 26.5) lets a remote attacker cause a denial-of-service crash or leak fragments of process memory when a victim opens a maliciously crafted file. Rated CVSS 7.1, it is unauthenticated but requires user interaction to open the file. There is no public exploit identified at time of analysis, EPSS is negligible (0.02%), and it is not on CISA KEV.
High confidentiality information disclosure across Apple's ecosystem (iOS, iPadOS, macOS, visionOS) allows remote unauthenticated attackers to extract sensitive data by delivering a maliciously crafted file. The vulnerability affects all current Apple operating systems and was fixed in March 2026 security updates (iOS/iPadOS 18.7.9/26.5, macOS 14.8.7/26.5, visionOS 26.5). Despite CVSS 7.5 HIGH rating and network attack vector requiring no privileges, EPSS exploitation probability is very low at 0.02% (5th percentile), suggesting minimal real-world risk. No active exploitation confirmed (not in CISA KEV) and no public POC identified at time of analysis.
Content Security Policy bypass in Apple's WebKit-based platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) allows maliciously crafted web content to evade CSP enforcement, undermining a core browser defense against XSS and data exfiltration. Apple addressed the input validation flaw across its product line in coordinated June 2026 updates. No public exploit is identified at time of analysis and EPSS is very low (0.03%), but the cross-platform reach and high CIA impact via user interaction make patching a priority.
Use-after-free in WebKit allows remote attackers to trigger Safari crashes and potentially achieve arbitrary code execution across Apple's entire ecosystem (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) via maliciously crafted web content. Users must visit or be tricked into visiting a malicious webpage (UI:R). Despite CVSS 8.8 (High) with theoretical code execution impact (C:H/I:H/A:H), EPSS probability is extremely low (0.02%, 5th percentile), indicating minimal observed exploitation activity. No public exploit identified at time of analysis, and vendor patches are available across all platforms as of version 26.5.
Memory corruption in Safari's WebKit engine across all Apple platforms allows remote attackers to trigger information disclosure via maliciously crafted web content delivered through network-accessible attack vectors requiring no authentication or user interaction. Despite the vendor description focusing on crash scenarios, the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates high confidentiality impact with no availability impact, suggesting potential memory disclosure rather than denial of service. Patched in iOS/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. EPSS score of 0.02% (5th percentile) suggests low probability of mass exploitation despite network-accessible attack vector.
Memory corruption in WebKit across Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS) allows remote attackers to access sensitive information via malicious web content. CVSS vector indicates network-based exploitation requiring no user interaction or authentication (AV:N/AC:L/PR:N/UI:N), contradicting the description's 'process crash' outcome with the High Confidentiality impact rating. EPSS score of 0.02% (5th percentile) suggests low real-world exploitation probability. Vendor patches available for all affected platforms (version 26.5). SSVC framework rates this as automatable with partial technical impact but no observed exploitation.
Buffer overflow in Apple's image processing framework across iOS, iPadOS, macOS, tvOS, and watchOS allows remote attackers to cause denial of service through process memory corruption. Despite the CVSS 7.5 (High) rating and network attack vector, the vulnerability is rated low priority with only 2% EPSS exploitation probability (5th percentile), indicating minimal real-world threat activity. Apple has released patches in version 26.5 across all affected platforms. No active exploitation or public proof-of-concept has been identified at time of analysis.
Use-after-free in WebKit across Apple's entire operating system ecosystem enables remote information disclosure via malicious web content. Affects iOS/iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions prior to 26.5. The vulnerability allows network-based unauthenticated attackers to access high-value confidential information through crafted web pages, though the CVE description anomalously mentions process crash (availability impact) while the CVSS vector indicates confidentiality impact only. No public exploit identified at time of analysis. EPSS score of 0.02% (5th percentile) suggests low likelihood of imminent widespread exploitation despite the broad platform impact and network attack vector.
Memory corruption in Apple's image processing subsystem allows remote unauthenticated attackers to read sensitive process memory across all major Apple platforms (iOS, macOS, tvOS, visionOS, watchOS). CVSS 7.5 indicates network-exploitable, no-interaction attack surface, yet EPSS score of 0.02% (7th percentile) suggests low observed exploitation activity. Vendor-released patches available for all affected platforms as of March 2026. No active exploitation confirmed (not in CISA KEV), but the network attack vector and broad platform impact warrant priority patching for Apple ecosystem deployments.
Use-after-free memory corruption in Apple operating systems allows high confidentiality impact through unexpected system termination. Affects iOS/iPadOS versions before 18.7.9 and 26.5, macOS Sequoia before 15.7.7, macOS Sonoma before 14.8.7, macOS Tahoe before 26.5, tvOS before 26.5, visionOS before 26.5, and watchOS before 26.5. Vendor-released patches are available across all affected platforms. EPSS score of 0.02% (7th percentile) indicates low observed exploitation probability in the wild, and no public exploit identified at time of analysis. CVSS vector indicates network-reachable attack surface with no authentication required, though the description states only 'an app' can trigger the condition, suggesting conflicting attack vector classification.
Memory corruption in WebKit across Apple's ecosystem enables confidentiality breach via malicious web content without user interaction. Affects iOS/iPadOS versions prior to 18.7.9 and 26.5, macOS Tahoe prior to 26.5, and all Apple operating systems (tvOS, visionOS, watchOS) prior to 26.5. Despite CVSS 7.5 (High), the EPSS score of 0.03% (10th percentile) indicates minimal real-world exploitation likelihood at time of analysis. No active exploitation confirmed (not in CISA KEV), and no public exploit code identified. Apple has released patches across all affected platforms.
Information disclosure in Apple WebKit's web content processing engine allows remote attackers to read sensitive memory contents via maliciously crafted web pages. This buffer overflow vulnerability (CWE-119) affects all major Apple platforms including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to their respective patched versions. The CVSS vector AV:N/AC:L/PR:N/UI:N indicates trivial network-based exploitation requiring no authentication or user interaction, though the impact is limited to confidentiality (C:H/I:N/A:N) rather than the process crash described by Apple. EPSS score of 0.03% (10th percentile) suggests low observed exploitation probability despite the ease of exploitation. No CISA KEV listing or public POC identified at time of analysis. Apple has released patches across all affected platforms.
Kernel memory layout disclosure in Apple iOS, iPadOS, macOS, tvOS, and watchOS allows a malicious application to read sensitive log data that exposes kernel address information, enabling KASLR bypass. The flaw stems from insufficient redaction of kernel pointers written to system logs (CWE-532) and was reported and patched by Apple across its operating system families. No public exploit identified at time of analysis and EPSS probability is very low (0.02%), but the issue is typically chained with memory-corruption bugs to achieve reliable kernel exploitation.
Memory-corruption crash in Apple's WebKit web-content engine lets a malicious website terminate the content-rendering process across iOS/iPadOS, macOS, tvOS, visionOS and watchOS prior to the 26.5 (and 18.7.9) releases. The flaw is triggered simply by viewing attacker-controlled web content, requiring no authentication but one user action (opening a page). There is no public exploit identified at time of analysis and SSVC rates exploitation as none, though the assigned CVSS 8.8 reflects worst-case memory-corruption potential rather than the crash-only behavior Apple documents.
Memory-safety corruption (CWE-119) in Apple's web content engine allows a remote attacker who lures a victim to a malicious page to crash the WebKit rendering process across iOS/iPadOS, macOS Tahoe, tvOS, visionOS and watchOS. Reported by Apple and fixed in iOS/iPadOS 18.7.9 and 26.5 and the 26.5 releases of the other platforms; there is no public exploit identified at time of analysis, EPSS is very low (0.03%), and CISA SSVC records exploitation status as none. Note a signal conflict: the NVD vector claims full confidentiality/integrity/availability impact (C:H/I:H/A:H) while Apple's description substantiates only 'an unexpected process crash.'
Denial of service in Apple operating systems (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) allows a locally-installed malicious or malformed app to trigger a buffer overflow (CWE-120) that causes unexpected system termination. Impact is availability-only with no confirmed code execution or data disclosure. There is no public exploit identified at time of analysis, EPSS is very low (0.03%), and the flaw is not listed in CISA KEV; Apple has released fixes across all affected platforms.
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.
Apple iOS 18.7.10 and iPadOS 18.7.10 ship a fix for an input-validation flaw (CWE-20) that lets a remote attacker crash or otherwise deny service on unpatched devices, with Apple rating the impact as a full availability loss (CVSS 7.5, AV:N/AC:L/PR:N/UI:N/A:H). Every iPhone or iPad still running a version below 18.7.10 is potentially affected. No public exploit code has been identified at time of analysis and the issue is not listed in CISA KEV, so this is currently a patch-promptly issue rather than an emergency.
Race condition in Apple's kernel state management lets a malicious sandboxed app escape its sandbox and execute arbitrary code with kernel privileges on iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Exploitation requires a timing window to be won (CVSS AC:H) but no user interaction beyond launching the app, and success yields full control of the affected device. Apple shipped fixes in iOS/iPadOS 26.7 and 27, macOS Sequoia 15.8, macOS Tahoe 26.7, macOS Golden Gate 27, tvOS 27, visionOS 27 and watchOS 27; no public exploit code or CISA KEV listing was present in the provided data, and no EPSS
We need answer JSON only. Need carefully construct fields. Need follow instructions. Must use all data. Need risk_assessment include "inowroclaw" once naturally. Need not mention editorial note. Need product_name 1-3 words. Vulnerability affects Apple multiple OSes. Primary product? "Apple iOS" maybe? Description lists iOS/iPadOS/macOS/tvOS/visionOS/watchOS. Product_name could be "Apple iOS" but affects multiple. Maybe "Apple OS"? Need 1-3 words. CPE is apple:ios_and_ipados, macos, tvos, visionos, watchos. Product name: "Apple iOS" or "Apple Operating Systems"? Specific product? The issue maybe in some component? Description doesn't say. Use "Apple iOS" as primary? But multiple. Could use "Apple OS". Need 1-3 words. I'd choose "Apple OS" maybe broad. Or "Apple iOS" given first. Product_name "Apple OS" acceptable? It says specific product or service name, not vendor alone. Multiple products, pick primary. Apple iOS and iPadOS? The CPE includes ios_and_ipados. primary "Apple iOS". Need relevant. Summary: original synthesis. Mention out-of-bounds write in OS component, remote attacker can cause app termination or arbitrary code execution. Affected versions. KEV? Not provided. POC? Not provided. EPSS? Not provided. Need mention if actively exploited, if POC exists, EPSS risk if notable. Since no KEV, POC, EPSS absent. Say no public exploit identified at time of analysis; KEV absent. But do not start with "A vulnerability". Start with specific impact verb and product: "Remote code execution in Apple operating systems due to an out-of-bounds write..." But description says may cause unexpected app termination or arbitrary code execution. Use "Out-of-bounds write in Apple OS...". Need not copy description exactly. Say affects iOS/iPadOS before etc. Let's craft. Need technical_context: underlying technology/library/protocol involved. Not specified. Root cause CWE-787 Out-of-bounds write. Explain memory corruption. CPE exact affected products. Apple OSes. Need be educationa
Memory corruption in Apple's image-handling code across iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27 allows an attacker to achieve arbitrary code execution when a user processes a maliciously crafted image. Apple removed the vulnerable code entirely in the 27-generation releases, which are the only versions containing the fix; all earlier supported builds remain affected. The flaw is rated 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H), meaning exploitation needs local positioning plus some user interaction, and there is no public exploit code or CISA KEV entry identified at time of analysis.
A local privilege-escalation flaw in Apple's operating system family lets a malicious app already running on the device obtain root privileges by exploiting a missing authorization check. Apple addressed the issue with 'additional restrictions' in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, and visionOS 27, and the CVSS 3.1 score is 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation is not confirmed: the issue is not in CISA KEV, no public exploit code is identified, and CISA's SSVC assessment lists exploitation as 'none' and automatable as 'no', though technical impact is rated 'total' once root is achieved.
Content Security Policy enforcement failure in Safari's AudioWorklet contexts allows remote attackers to bypass CSP restrictions when a user processes maliciously crafted web content. Affected platforms include Safari before 26.5, iOS and iPadOS before 18.7.9/26.5, and macOS Tahoe before 26.5. Apple has released patches across all affected platforms; no public exploit or CISA KEV listing is identified at time of analysis.
Memory corruption in Apple's web content rendering engine affects iOS, iPadOS, and macOS Tahoe, enabling high-impact device compromise when a user processes maliciously crafted web content. All iOS and iPadOS versions prior to 18.7.10 and 26.6.1, and macOS Tahoe versions prior to 26.6.2, are confirmed affected per Apple security advisories and EUVD-2026-60510. Apple has released patched builds across all affected branches; no public exploit code or CISA KEV listing has been identified at time of analysis.
Integer overflow in Apple's image processing subsystem across iOS, iPadOS, and macOS Tahoe allows arbitrary code execution when a user processes a maliciously crafted image. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, with Apple releasing out-of-band point releases indicating urgency. No public exploit has been identified at time of analysis, but the CVSS 8.8 score and SSVC total technical impact rating place this among high-priority patching targets given Apple's massive consumer and enterprise device footprint.
Remote denial-of-service in Apple iOS, iPadOS, and macOS Tahoe exploits a use-after-free memory corruption flaw, allowing an unauthenticated remote attacker to trigger unexpected system termination without user interaction. Affected platforms include iOS and iPadOS prior to 26.6.1 and macOS Tahoe prior to 26.6.2, as confirmed by Apple security advisories. No public exploit code or active exploitation has been identified at time of analysis, but the network-accessible, zero-interaction attack surface presents a meaningful availability risk for all unpatched Apple devices.
Kernel memory corruption via race condition in Apple OS allows a malicious app to write arbitrary kernel memory or cause unexpected system termination. The issue affects iOS, iPadOS, macOS, and watchOS versions prior to the June 2026 security fixes, and has been patched by Apple. No public exploit or active exploitation is known, and EPSS indicates a low probability of widespread exploitation at this time.
A code signing enforcement bypass in Apple operating systems allows a maliciously crafted app to execute with high confidentiality and integrity impact. No active exploitation is reported, and the EPSS score of 0.17% indicates a low probability of weaponization. Apple has released patches in version 26.6 for all affected platforms.
A sandbox escape vulnerability in Apple operating systems allows a malicious app to break out of its containment and gain full access to the device. Affected versions include iOS and iPadOS prior to 26.6, multiple macOS versions (Sonoma before 14.8.8, Sequoia before 15.7.8, Tahoe before 26.6), and tvOS before 26.6. No public exploit or active exploitation has been identified, and EPSS indicates a low probability of real-world attacks.
Memory corruption in Apple's audio processing framework affects iOS, iPadOS, macOS (Sonoma, Sequoia, Tahoe), tvOS, visionOS, and watchOS, where parsing a maliciously crafted audio file can corrupt process memory and potentially lead to arbitrary code execution. The flaw requires a victim to open or process the malicious file (local vector, user interaction) but no prior privileges. Apple has shipped fixes across all platforms; no public exploit identified at time of analysis and EPSS is low (0.16%).
Use-after-free vulnerability in Safari’s web content processing allows remote attackers to execute arbitrary code on affected Apple devices when a user visits a malicious website. Affected versions include Safari prior to 26.6, iOS and iPadOS prior to 26.6, macOS Tahoe prior to 26.6, visionOS prior to 26.6, and watchOS prior to 26.6. No public exploit or active exploitation has been identified, and EPSS indicates a low probability of exploitation (0.13%).
Denial-of-service (unexpected system termination) affects Apple's shared OS platforms - iOS/iPadOS before 26.6, macOS Sequoia before 15.7.8, macOS Sonoma before 14.8.8, macOS Tahoe/tvOS/visionOS/watchOS before 26.6 - where a use-after-free (CWE-416) lets a locally installed app crash the system. There is no public exploit identified at time of analysis and the NVD CVSS 9.8 (C:H/I:H/A:H) conflicts with Apple's own description, which states only 'unexpected system termination' (availability impact), suggesting the true impact is a DoS crash rather than full compromise. EPSS is low (0.17%, 6th percentile) and the issue is not in CISA KEV.
Arbitrary code execution via buffer overflow in Apple iOS, iPadOS, and macOS. Processing a maliciously crafted file can
Memory corruption in Apple's cross-platform image-processing stack allows a maliciously crafted image to corrupt process memory across iOS/iPadOS, macOS, tvOS, visionOS, and watchOS. Apple self-reported and patched the flaw (fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6, and the 26.6 releases of tvOS/visionOS/watchOS). No public exploit identified at time of analysis; EPSS is low (0.17%, 6th percentile) and CISA SSVC records exploitation status as none, though the technical impact is rated total.
Local denial-of-service in Apple operating systems via a use-after-free vulnerability allows an app to cause unexpected system termination. Affected versions include iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. While the NVD assigns CVSS 9.8, the actual impact is limited to availability; no active exploitation or public exploit code is identified, and EPSS indicates very low exploitation probability (0.17%).
Memory corruption in Apple Safari 26.x allows remote code execution via processing maliciously crafted web content. This buffer overflow (CWE-119) affects all Apple platforms—iOS, iPadOS, macOS, visionOS, and watchOS—requiring user interaction to visit a malicious webpage. While the CVSS score is critical (8.8), EPSS (0.13%) indicates low current exploitation probability and no KEV listing or public exploit exists.
A race condition in Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS) fixed in version 26.6 allows a local malicious app to cause unexpected system termination, resulting in a denial-of-service condition. No evidence of active exploitation or public exploit code exists, and EPSS indicates very low exploitation probability (0.16%). The NVD-assigned CVSS 9.8 appears inconsistent with the actual impact, which is limited to availability.
Unexpected system termination in iOS and iPadOS prior to 26.6, as well as in certain versions of macOS, tvOS, and visionOS, resulting from a use-after-free memory corruption. Apple's description indicates a local denial-of-service where a malicious app can crash the system, while the NVD-assigned CVSS 9.8 erroneously implies unauthenticated remote code execution. A patch is available, no active exploitation has been reported, and EPSS suggests a very low probability of wide exploitation.
Missing authorization in Apple's Contacts framework across iOS/iPadOS, macOS Tahoe, visionOS, and watchOS (all versions before 26.6) allows an installed app to add contact entries without triggering the user's authorization prompt. Apple fixed the flaw with improved validation in the 26.6 releases. There is no public exploit identified at time of analysis and it is not on CISA KEV; EPSS is low at 0.16% (6th percentile), consistent with a low-severity local privacy-scope bypass despite the input's inflated 9.8 score.
User fingerprinting in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to collect device or user identifiers due to a permissions issue. All versions prior to the 26.6 updates are affected. No public exploit code or active exploitation has been identified, and EPSS indicates a low 0.15% probability of exploitation.
Kernel memory corruption in Apple XNU kernel allows a remote attacker to potentially execute arbitrary code or crash the system when a victim connects to a malicious NFS server. Affected are all Apple operating systems—iOS, iPadOS, macOS, tvOS, and watchOS—before version 26.6. No active exploitation or public exploit code has been observed, and EPSS indicates a low probability of widespread attacks.
Processing a maliciously crafted file on unpatched Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS, visionOS) may allow arbitrary code execution due to an integer overflow in file handling. The vulnerability affects all versions prior to the latest OS updates and requires user interaction (opening a file) to trigger. No active exploitation or public exploit code has been identified, and patches are available in the vendor-released updates.
Remote system termination in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) can be triggered by a remote attacker via an out-of-bounds write. The issue, patched in the latest OS updates, carries a CVSS base score of 9.8 but is not known to be actively exploited. EPSS estimates a low 0.25% probability of exploitation, and no public exploit code has been identified.
Remote code execution in Apple operating systems prior to iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6 allows unauthenticated network attackers to corrupt heap memory via an out-of-bounds write. This can lead to arbitrary code execution or unexpected application termination, compromising the affected device
Physical-proximity memory corruption in multiple Apple operating systems (iOS, iPadOS, macOS, tvOS, watchOS, visionOS) allows a nearby attacker to corrupt process memory, potentially leading to arbitrary code execution or denial of service. No active exploitation is known, and vendor-released patches are available. EPSS score is low (0.16%), and the CVSS vector supplied (AV:N) conflicts with the required physical proximity.
Memory corruption in multiple Apple operating systems allows remote attackers to trigger buffer overflows that may cause application termination or arbitrary code execution. Affected products include iOS and iPadOS prior to version 26.6, macOS before Sequoia 15.7.8 and Tahoe 26.6, tvOS before 26.6, and visionOS before 26.6; no active exploitation or public proof-of-concept has been reported.
We need to produce a JSON analysis. We have CVE-2026-43814. Description: use after free in Apple's operating systems (iOS, iPadOS, macOS, tvOS, watchOS), fixed in versions 26.6. CVSS is 9.8 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-416 use after free. EPSS 0.16%, low. No KEV mention, so not in KEV. Tags: Denial of Service, Apple, etc. But description says "app may be able to cause unexpected system termination" -> that's a crash/DoS. The CVSS suggests network, no privs, high impact on CIA. That seems contradictory: a network attack causing system termination by an app? It might be that the vulnerability is in some system component that an app can trigger, and the app could be network-facing? Or maybe CVSS is wrong. Let's synthesize. We must produce product_name: 1-3 words: "iOS and iPadOS" ... but includes multiple. Affected products: many. Primary product? I'd say "Apple OS Family" not appropriate? The description says "iOS and iPadOS", "macOS", "tvOS", "watchOS". I'll pick the most prominent: "iOS and iPadOS" or "Apple OS" but we need 1-3 words. "iOS and iPadOS" is 3 words. That works, includes the primary. Or "Apple Operating Systems" but that's generic. I'll use "iOS and iPadOS" since it's first listed and likely the most used. But the vulnerability spans all. I'll go with "Apple OS Family"? That's 3 words: Apple OS Family. I think product_name: "Apple OS Family" (or "Apple iOS/macOS"). The instruction says "If multiple products, pick the primary one." The primary might be iOS. So "iOS". But then the summary might need to clarify. I'll pick "iOS" as the most common, and mention others. In product_name, "iOS" is 1 word. That might simplify. I'll go with "iOS" but technically the vulnerability is in iOS, iPadOS, macOS, tvOS, watchOS. So I'll put "iOS and iPadOS" as two-word phrase? Actually three words. I'll put "iOS" as primary, but that's reductive. Let's think: The CPEs are separate: cpe:2.3:a:apple:ios_and_ipados:*:*, etc. The NVD often groups them
Processing a maliciously crafted video file may lead to memory corruption enabling possible arbitrary code execution on multiple Apple operating systems. Affected platforms include iOS, iPadOS, macOS, tvOS, watchOS, and visionOS; fixes are available in the latest updates (iOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6). User interaction is required to open the malicious video, and no public exploit or active exploitation is known at this time.
Arbitrary code execution in Apple iOS, iPadOS, and macOS arises when the OS image-processing pipeline handles a maliciously crafted image, triggering an integer overflow (CWE-190) that can be leveraged to run attacker-controlled code. The flaw affects iOS/iPadOS before 26.6 and multiple macOS trains (Sonoma before 14.8.8, Sequoia before 15.7.8, Tahoe before 26.6) and requires the victim to open or process the malicious image (UI:R). No public exploit has been identified at time of analysis, EPSS is low (0.18%, 7th percentile), and it is not listed in CISA KEV.
We need to output a JSON object with the specified fields, synthesizing from the provided CVE data. The input includes: CVE ID, description, CVSS score 9.8, vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, CWE-416, EPSS 0.17% (6th percentile), patch available, tags: Denial Of Service, Apple, etc., SSVC: exploitation none, automatable yes, technical impact total. CPE strings, references to Apple support pages, affected versions from EUVD. The description says: "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination." Important: The impact phrase says "An app may be able to cause unexpected system termination." That sounds like a denial of service, not code execution. However, the CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which implies full confidentiality, integrity, availability impact. That seems contradictory because causing unexpected system termination would typically be A:H only, and perhaps C/I not impacted, or maybe the vulnerability is local (an app) and might require user interaction? The CVSS vector suggests network attack, no privileges, no user interaction, high impact on all three. That doesn't align with the description saying "An app may be able to cause unexpected system termination." The CVSS score might be from NVD or Apple, but the description suggests only a denial-of-service (system termination). Also tags include "Denial Of Service" but also "Memory Corruption", "Use After Free". Use-after-free can lead to code execution, but the description explicitly says "unexpected system termination". However, the CVSS vector implies total compromise. This discrepancy must be addressed in the analysis. We need to produce a synthesis. The request: "Return a JSON object ... CRITICAL: Do NOT copy or paraphrase the Descriptio
We are tasked with producing a JSON analysis for CVE-2026-64747. We must use all provided data, including EPSS, SSVC, patch availability, CPE, and tags. The vulnerability is a buffer overflow in Apple products, with an app potentially executing arbitrary code with kernel privileges. CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). CWE-120. Patch available from vendor. EPSS 0.19% (low). SSVC: Exploitation none, Automatable no, Technical impact total. KEV status? Not in input, so not KEV. POC? Not mentioned. Tags include RCE, Apple, Buffer Overflow, etc. Affected products: iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. CPEs confirm. References are Apple support pages. We must produce fields: - product_name: 1-3 words, specific product. Since it spans many OSes, the "primary one"? The CVE description mentions iOS and iPadOS, macOS, tvOS, visionOS, watchOS. The common underlying component is likely the kernel or something. But the product is Apple's operating systems. Could say "Apple OS Family" or "Apple Kernel". The description says "An app may be able to execute arbitrary code with kernel privileges." So the vulnerability is in the kernel, accessible via an app. So product could be "Apple Kernel" or "Apple Operating Systems". But the instruction says "The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel'." So maybe "Apple Kernel". However, it's not explicitly named. The CPEs list specific products: ios_and_ipados, macos, tvos, visionos, watchos. So I'll use "Apple OS Family" but that is 3 words. "Apple Kernel" is 2 words. I'll go with "Apple Kernel" as the vulnerable component. The description isn't clear if it's the kernel itself or a system library, but "kernel privileges" suggests kernel execution. So "Apple Kernel" is appropriate. - summary: 2-3 sentences, original synthesis, avoid starting with "A vulnerability". Start with impact verb a
A use-after-free vulnerability in Apple operating systems allows a malicious app to cause unexpected system termination or write to kernel memory. The issue affects iOS
Denial of service in Apple iOS, macOS, and related operating systems due to a use-after-free flaw could allow a malicious app to crash the device. Apple's advisory only confirms unexpected system termination, but an independent CVSS score of 9.8 suggests potential for full system compromise; however, the CVSS vector appears inconsistent with the vendor description. The vulnerability is patched in versions 26.6 for all affected OSes, and no active exploitation or public exploit code is known.
Remote attackers can cause unexpected application termination and potentially read sensitive memory on affected Apple devices. This out-of-bounds read vulnerability, tracked as CVE-2026-64768, affects iOS, iPadOS, macOS, tvOS, and visionOS due to insufficient input validation. No active exploitation or public proof-of-concept code has been identified.
Information disclosure in Apple Safari and OS-integrated WebKit allows websites to detect if a user has visited specific URLs. Safari, iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to version 26.6 are affected. No public exploit code or active attacks have been reported, and the probability of exploitation is very low (EPSS 0.17%).
Denial-of-service vulnerability in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS due to an out-of-bounds write in a shared component. A malicious app executed locally can cause a system crash; the CVSS vector also suggests potential high confidentiality impact (memory disclosure), though the advisory only mentions denial-of-service. Fixed in updates; no active exploitation or public exploit code reported, and EPSS probability is very low (0.17%).
Remote code execution in Apple operating systems (iOS, iPadOS, macOS Sequoia, macOS Tahoe, tvOS, visionOS) stems from an out-of-bounds write bug. An unauthenticated attacker can trigger heap corruption by sending a malicious payload over the network, leading to unexpected application termination or potential arbitrary code execution with no user interaction required. Apple has released platform patches fixing this critical vulnerability, and while no active exploitation or public exploit is known, the EPSS score indicates low near-term exploitation
Arbitrary code execution via malicious file processing affects multiple Apple operating systems due to an out-of-bounds write. Fixed in iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. No active exploitation or public exploit is known, and EPSS predicts a very low probability of real-world attacks.
Denial of service in Apple operating systems (iOS/iPadOS 26.6, macOS Sonoma 14.8.8, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS/visionOS/watchOS 26.6) allows a locally installed app to trigger an integer overflow that causes unexpected system termination. The flaw was reported and patched by Apple, and CISA's SSVC framework rates exploitation as 'none' with EPSS at just 0.17% (6th percentile), indicating no public exploit identified at time of analysis. Note a significant signal conflict: the NVD CVSS vector of 9.8 (AV:N, full C/I/A impact) is inconsistent with the description, which describes only an app-triggered crash.
A data protection flaw in multiple Apple operating systems allows a locally-installed app to fingerprint the user. An attacker can use this information disclosure vulnerability to track the user’s identity across different contexts, violating privacy. The issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6, and no active exploitation or public exploit code has been observed.
Sandbox escape in Apple iOS/iPadOS, macOS, and watchOS lets a malicious application break out of its sandbox by triggering an integer overflow (CWE-190) in shared OS code, potentially gaining access beyond its permitted boundaries. Apple discovered and reported the issue and shipped fixes across its platform lineup; there is no public exploit identified at time of analysis, and CISA SSVC rates exploitation as none, though the total technical impact and scope change make it a meaningful local sandbox-escape risk. EPSS is low (0.16%, 6th percentile), consistent with no observed exploitation.
Memory corruption vulnerability in Apple operating system kernels (iOS, iPadOS, macOS, visionOS) arises from improper memory handling (CWE-119) and can be triggered by a locally installed application. Successful exploitation may allow an attacker to cause unexpected
Processing a maliciously crafted file on Apple operating systems can lead to arbitrary code execution due to an integer overflow vulnerability (CWE-190). Affected products include iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, all prior to their respective fixed versions. No public exploit code has been identified, and the EPSS score of 0.17% indicates a very low probability of near-term exploitation, though the impact could be severe.
Memory corruption vulnerability in Apple operating systems (iOS, iPadOS, macOS, tvOS, visionOS) allows an attacker with a maliciously crafted image to corrupt process memory, potentially leading to arbitrary code execution. The issue is fixed in iOS/iPadOS 26.6, macOS Sequoia 15.7.8/macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6. No active exploitation has been reported (CISA KEV not listed), and the EPSS score of 0.16% indicates low exploitation likelihood.
We need to generate a JSON object with specific fields, all plain text strings. Provided data: CVE-2026-28928, Apple vulnerability, use after free in iOS/iPadOS/macOS/tvOS/watchOS, fixed in version 26.6. Description: "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination." CVSS: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-416. EPSS 0.16% percentile 6%. Patch available. Reported by Apple. CPE strings: a:apple:ios_and_ipados:*, a:apple:macos:*, a:apple:tvos:*, a:apple:watchos:*. Tags: Denial Of Service, Apple, Ios And Ipados, Tvos, Watchos, Memory Corruption, Use After Free. SSVC: Exploitation none, Automatable yes, Technical Impact total. EUVD affected versions: macOS 0<26.6, watchOS 0<26.6, tvOS 0<26.6, iOS and iPadOS 0<26.6. References: support.apple.com pages. Now produce JSON. product_name: "3 words ONLY. The specific product or service name affected." That would be "iOS and iPadOS" possibly? But description covers multiple. The primary? Since all Apple OSes, we can say "Apple OS (iOS/macOS)"? The rule: "1-3 words ONLY. The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel', 'nginx-ui', 'GoAnywhere MFT'. NOT the vulnerability type, NOT the vendor alone, NOT a description. If multiple products, pick the primary one." Which primary? The CVE covers all Apple OS families: iOS, iPadOS, macOS, tvOS, watchOS. Probably best to say "Apple operating systems" or "Apple iOS/macOS". But need 1-3 words. "Apple OS" might be acceptable, but that's too generic. "iOS" alone? But the vulnerability isn't iOS-specific; it's across. I'll pick "Apple iOS, macOS" – 3 words. Or "Apple OSes". I'll go with "Apple OS" (2 words). The product_name field is for the product name. Since it's a cross-platform issue in Apple's core OS, I'll label it "Apple iOS and macOS" (4 words, too l
A memory corruption vulnerability in Apple iOS, iPadOS, and macOS when processing a crafted image can allow an attacker to corrupt process memory, potentially leading to arbitrary code execution. Exploitation requires local access and user interaction. Patches are available in iOS 26.6/iPadOS 26.6, macOS Sequoia 15.7.8, and macOS Tahoe 26.6, and no active exploitation or public exploit code
Heap-based buffer overflow in Apple iOS, iPadOS, macOS, tvOS, and visionOS allows remote attackers to cause unexpected application termination or heap corruption via unspecified vectors. Given a CVSS score of 9.8, successful exploitation could lead to full system compromise. Patches are available from Apple in multiple OS updates, and no public exploit or active exploitation has been identified.
We are tasked to produce a JSON object with specific fields based on a CVE. We must synthesize multiple intelligence sources: CVE description, CVSS, EPSS, CPE, tags, references, ENISA data. The output must be plain text paragraphs, not arrays/objects. Let's analyze the input: - CVE-2026-64774 - Description: "An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption." - CVSS Score: 9.8, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CWE: CWE-190 (Integer Overflow) - EPSS: 0.24%, percentile 16% (low) - Patch: Available from vendor (confirmed by description listing fixed versions) - Reported by: apple - CPE: multiple Apple products: iOS and iPadOS, macOS, tvOS, visionOS - Tags: Apple, Buffer Overflow, Ios And Ipados, Tvos, Visionos, Integer Overflow (note "Buffer Overflow" tag but it's integer overflow leading to heap corruption, maybe buffer overflow is a result) - ENISA EUVD: affected versions listed: macOS 0 <26.6, macOS 0 <15.7.8, iOS and iPadOS 0 <26.6, macOS 0 <14.8.8, visionOS 0 <26.6, tvOS 0 <26.6. It's weird: "macOS 0 <26.6" maybe means all macOS before 26.6? But they also mention specific Sequoia 15.7.8, Sonoma 14.8.8, Tahoe 26.6. So the affected versions are those prior to these specific fixed versions? - References: many Apple support URLs (128066 to 128072), likely each for a product. Given the description, the integer overflow exists in some component (maybe kernel, a library) across Apple operating systems. It can be triggered remotely by an attacker, leading to unexpected application termination (DoS) or heap corruption (potentially code execution). CVSS says complete confidentiality, integrity, availability impact, but EPSS is low, KEV not mentioned. No POC mentioned. Tags include "Buffer Overflow" which might
Denial of service via unexpected app termination affects multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, watchOS, and visionOS, when processing a malicious accessory. The vulnerability stems from a buffer overflow (CWE-120) addressed with improved bounds checking in the latest updates. No active exploitation or public proof-of-concept is reported; EPSS score is low (0.18%), though the provided CVSS vector implies a critical network-based attack that does not align with the accessory requirement.
We need to produce a JSON object with all the required fields. The input provides: CVE-2026-43780, description, CVSS vector and score, CWE, EPSS, patch info, CPEs, tags, SSVC, EUVD info, affected versions, references. We must synthesize multi-source data. The CVE is about an integer overflow in iOS, iPadOS, macOS, tvOS, visionOS, watchOS when processing maliciously crafted texture. Fixed versions are given. Key tasks: ensure every field is a plain text string, no arrays or objects. Follow all precision rules. First, product_name: "iOS and iPadOS" (since that appears in the list, but it's a multi-product vulnerability. The instruction says "If multiple products, pick the primary one." The primary might be the overarching platform? The CPEs all start with apple. The product is a set of operating systems. Since the vulnerability is across many OS, maybe pick "Apple OS" or "Apple Operating Systems"? But the rule says 1-3 words, specific product. Could be "Apple iOS/iPadOS" but that's 2 words. I'll choose "Apple OS" as a collective term. However, the description mentions "iOS and iPadOS" first, then macos, etc. The most specific product name might be "iOS" as the representative. The rule says "NOT the vendor alone", so "Apple" isn't enough. "iOS" is a product. But vulnerability affects multiple products, but we need to pick the primary one. Since the title often says "iOS and iPadOS", it's a combo. I could say "iOS and iPadOS". That's 3 words. That's acceptable. I'll go with "iOS and iPadOS". Summary: Must not copy description. Must be original synthesis using all data. Start with impact verb and product. E.g., "Processing a maliciously crafted texture on Apple devices running iOS, iPadOS, macOS, tvOS, visionOS, or watchOS may cause an integer overflow leading to unexpected app termination." But need to mention CVSS, EPSS, POC status, KEV. No KEV here, no POC mentioned. So "no public exploit identified at time of analysis". EPSS score low (0.17%, percentile 6%). So s
Out-of-bounds read in Apple Safari's web content processing can crash the browser and potentially leak sensitive memory contents. This vulnerability affects all Apple platforms where Safari rendering is used and is fixed in Safari 26.6, iOS/iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, and watchOS 26.6. Exploitation requires user interaction to visit a malicious site; no known active exploits or public proof-of-concept exist.
Memory corruption vulnerability in multiple Apple operating systems allows local attackers to achieve arbitrary code execution by processing a maliciously crafted file. Affected versions include iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to 26.6. No active exploitation has been confirmed, and patches are available.
Out-of-bounds write in Apple operating systems (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) allows an attacker to trigger memory corruption leading to unexpected application termination when a victim processes maliciously crafted content. The flaw affects all major Apple platforms below the fixed versions and was reported and patched by Apple. There is no public exploit identified at time of analysis, and EPSS exploitation probability is low (0.17%, 7th percentile).
Denial-of-service in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to trigger an out-of-bounds read, causing app crashes or system instability. The
Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability, a path handling flaw in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, enables a low-privileged application to traverse directories and elevate its permissions. No user interaction is required, and no active exploitation or public proof-of-concept has been identified at the time of analysis.
Arbitrary code execution in Apple iOS and iPadOS, macOS, tvOS, visionOS, and watchOS permits an attacker to run code or terminate apps by luring a user into opening a crafted file. The out-of-bounds write issue was fixed in all supported Apple operating systems via June 2026 updates. No active exploitation or public proof-of-concept has been reported at time of analysis, and EPSS indicates a low probability of future exploitation.
Remote memory corruption in the Apple operating-system kernel (shared XNU core across iOS/iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS/visionOS/watchOS 26.6) allows a remote user to trigger unexpected system termination (denial of service) or corrupt kernel memory, potentially leading to arbitrary code execution in kernel context. Apple addressed the flaw with improved memory handling and credited its own security team. There is no public exploit identified at time of analysis and EPSS probability is low (0.25%), but the CVSS 9.8 rating and CISA SSVC 'total' technical-impact assessment mark it as a high-severity kernel bug.
Unexpected system termination due to memory initialization flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS allows a malicious application to forcibly crash the device. All versions prior to the listed fixed releases are affected. No active exploitation or publicly available exploit code was identified at time of analysis; EPSS indicates a low (0.16%) probability of exploitation.
Kernel memory corruption in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS allows a malicious app to cause system termination or corrupt kernel memory. A use-after-free issue in the kernel’s memory management could be triggered by an app, leading to unexpected system behavior or potential code execution. Patches are available across all affected operating systems; no active exploitation has been observed.
Kernel memory corruption in Apple iOS/iPadOS (before 26.5.2) and macOS Tahoe (before 26.5.2) allows a malicious or compromised app to corrupt kernel memory or trigger unexpected system termination via malformed input that bypasses validation. Reported by Apple internally and fixed with improved input validation; no public exploit identified at time of analysis and the issue is not listed in CISA KEV. Despite a high CVSS of 9.1, the practical attack surface is bound to code already executing on the device as an app.
Sandbox escape in Apple's WebKit/Safari web content engine allows a malicious website to process restricted web content outside the sandbox on Safari, iOS/iPadOS, and macOS prior to 26.5.2. Reported by Apple and classed as an improper access-control flaw (CWE-284), it requires a victim to load attacker-controlled content (UI:R) and carries CVSS 7.1 with a scope change, reflecting that breaking out of the sandbox crosses a security boundary. There is no public exploit identified at time of analysis and EPSS is low (0.16%), though CISA's SSVC framework rates the technique as automatable with partial technical impact.
Memory corruption via use-after-free in Apple's WebKit browser engine allows remote attackers to corrupt memory when a victim processes maliciously crafted web content on Safari, iOS/iPadOS, or macOS prior to 26.5.2. The CVSS 3.1 score of 8.8 reflects network-reachable exploitation requiring only that a user open a malicious page; no public exploit is identified at time of analysis and the issue is not listed in CISA KEV. Successful exploitation typically serves as the initial stage of a browser-based attack chain (often paired with a sandbox escape) to achieve code execution in the renderer.
Local privilege escalation and kernel memory corruption in Apple iOS, iPadOS (before 26.5.2) and macOS Tahoe (before 26.5.2) allows a malicious or compromised app to write kernel memory or force unexpected system termination by supplying improperly validated input to a privileged interface. Apple resolved the flaw through improved input sanitization. There is no public exploit identified at time of analysis, EPSS is low (0.18%, 8th percentile), and CISA SSVC records exploitation status as none, though it rates the technical impact as total and considers it automatable.
Memory corruption via type confusion in Apple's WebKit browser engine allows attackers to corrupt memory by luring a victim to maliciously crafted web content, affecting Safari, iOS/iPadOS, and macOS before version 26.5.2. The flaw (CWE-843) is network-reachable but requires user interaction (visiting a page), and no public exploit has been identified at time of analysis. Apple has shipped patches across Safari 26.5.2, iOS/iPadOS 26.5.2, and macOS Tahoe 26.5.2.
Sandbox escape in Apple's WebKit browser engine (Safari, iOS/iPadOS, and macOS Tahoe before 26.5.2) lets a malicious website process restricted web content outside the browser sandbox, undermining the isolation that confines untrusted web pages. The flaw stems from improper input validation (CWE-20), was reported by Apple itself, and requires a victim to visit attacker-controlled content (UI:R); CVSS 7.1 reflects limited confidentiality, integrity, and availability impact across a changed scope. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Cross-origin data exfiltration in Apple's Safari/WebKit engine (Safari, iOS/iPadOS, and macOS Tahoe before 26.5.2) allows a malicious website to bypass the same-origin policy and read data belonging to other origins after a victim is lured into visiting it. Tracked under CWE-352 and rated CVSS 8.1, the flaw requires user interaction (visiting the attacker page) but no authentication or elevated privileges. No public exploit identified at time of analysis; EPSS is low at 0.17% and CISA SSVC records exploitation status as none.
Memory corruption in Apple's WebKit browser engine (Safari and the system WebView on iOS, iPadOS, and macOS before 26.5.2) allows a remote attacker to corrupt process memory when a victim loads maliciously crafted web content. The flaw is a use-after-free (CWE-416) and carries a CVSS 8.8 with required user interaction; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though Apple reported and patched it in coordinated releases on 2026 advisories.
Denial-of-service in Apple iOS and iPadOS lets a remote attacker exhaust device resources through maliciously crafted input, degrading availability without compromising data confidentiality or integrity. All iOS/iPadOS builds before 18.7.9 and before 26.4 are affected, and Apple has shipped fixes in both trains. There is no public exploit identified at time of analysis, and EPSS exploitation probability is very low (0.05%, 17th percentile) despite the network-facing CVSS 7.5 rating.
Sandbox escape vulnerability in Apple operating systems allows malicious apps with low privileges to break out of application sandbox and execute code with elevated privileges on the host system. Affects iOS, iPadOS, macOS, tvOS, visionOS, and watchOS across multiple versions. Apple has released patches for all affected platforms. EPSS score of 0.02% (7th percentile) indicates low probability of mass exploitation in the wild, though the CVSS 8.8 score reflects significant potential impact if successfully weaponized. No active exploitation confirmed at time of analysis.
Type confusion vulnerability in Apple's operating systems allows remote unauthenticated attackers to trigger denial of service across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. Apple has released patches addressing the issue in iOS/iPadOS 18.7.9 and 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. The CVSS vector indicates network-accessible exploitation with low complexity and no privileges required, though EPSS score of 0.13% (32nd percentile) suggests relatively low likelihood of widespread exploitation. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Memory-corruption in Apple's operating-system file-processing components (iOS/iPadOS before 18.7.9, macOS Sequoia before 15.7.7, macOS Tahoe before 26.5) lets a remote attacker cause a denial-of-service crash or leak fragments of process memory when a victim opens a maliciously crafted file. Rated CVSS 7.1, it is unauthenticated but requires user interaction to open the file. There is no public exploit identified at time of analysis, EPSS is negligible (0.02%), and it is not on CISA KEV.
High confidentiality information disclosure across Apple's ecosystem (iOS, iPadOS, macOS, visionOS) allows remote unauthenticated attackers to extract sensitive data by delivering a maliciously crafted file. The vulnerability affects all current Apple operating systems and was fixed in March 2026 security updates (iOS/iPadOS 18.7.9/26.5, macOS 14.8.7/26.5, visionOS 26.5). Despite CVSS 7.5 HIGH rating and network attack vector requiring no privileges, EPSS exploitation probability is very low at 0.02% (5th percentile), suggesting minimal real-world risk. No active exploitation confirmed (not in CISA KEV) and no public POC identified at time of analysis.
Content Security Policy bypass in Apple's WebKit-based platforms (iOS, iPadOS, macOS Tahoe, tvOS, visionOS, watchOS) allows maliciously crafted web content to evade CSP enforcement, undermining a core browser defense against XSS and data exfiltration. Apple addressed the input validation flaw across its product line in coordinated June 2026 updates. No public exploit is identified at time of analysis and EPSS is very low (0.03%), but the cross-platform reach and high CIA impact via user interaction make patching a priority.
Use-after-free in WebKit allows remote attackers to trigger Safari crashes and potentially achieve arbitrary code execution across Apple's entire ecosystem (iOS, iPadOS, macOS, tvOS, visionOS, watchOS) via maliciously crafted web content. Users must visit or be tricked into visiting a malicious webpage (UI:R). Despite CVSS 8.8 (High) with theoretical code execution impact (C:H/I:H/A:H), EPSS probability is extremely low (0.02%, 5th percentile), indicating minimal observed exploitation activity. No public exploit identified at time of analysis, and vendor patches are available across all platforms as of version 26.5.
Memory corruption in Safari's WebKit engine across all Apple platforms allows remote attackers to trigger information disclosure via maliciously crafted web content delivered through network-accessible attack vectors requiring no authentication or user interaction. Despite the vendor description focusing on crash scenarios, the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates high confidentiality impact with no availability impact, suggesting potential memory disclosure rather than denial of service. Patched in iOS/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. EPSS score of 0.02% (5th percentile) suggests low probability of mass exploitation despite network-accessible attack vector.
Memory corruption in WebKit across Apple platforms (iOS, iPadOS, macOS, tvOS, visionOS) allows remote attackers to access sensitive information via malicious web content. CVSS vector indicates network-based exploitation requiring no user interaction or authentication (AV:N/AC:L/PR:N/UI:N), contradicting the description's 'process crash' outcome with the High Confidentiality impact rating. EPSS score of 0.02% (5th percentile) suggests low real-world exploitation probability. Vendor patches available for all affected platforms (version 26.5). SSVC framework rates this as automatable with partial technical impact but no observed exploitation.
Buffer overflow in Apple's image processing framework across iOS, iPadOS, macOS, tvOS, and watchOS allows remote attackers to cause denial of service through process memory corruption. Despite the CVSS 7.5 (High) rating and network attack vector, the vulnerability is rated low priority with only 2% EPSS exploitation probability (5th percentile), indicating minimal real-world threat activity. Apple has released patches in version 26.5 across all affected platforms. No active exploitation or public proof-of-concept has been identified at time of analysis.
Use-after-free in WebKit across Apple's entire operating system ecosystem enables remote information disclosure via malicious web content. Affects iOS/iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions prior to 26.5. The vulnerability allows network-based unauthenticated attackers to access high-value confidential information through crafted web pages, though the CVE description anomalously mentions process crash (availability impact) while the CVSS vector indicates confidentiality impact only. No public exploit identified at time of analysis. EPSS score of 0.02% (5th percentile) suggests low likelihood of imminent widespread exploitation despite the broad platform impact and network attack vector.
Memory corruption in Apple's image processing subsystem allows remote unauthenticated attackers to read sensitive process memory across all major Apple platforms (iOS, macOS, tvOS, visionOS, watchOS). CVSS 7.5 indicates network-exploitable, no-interaction attack surface, yet EPSS score of 0.02% (7th percentile) suggests low observed exploitation activity. Vendor-released patches available for all affected platforms as of March 2026. No active exploitation confirmed (not in CISA KEV), but the network attack vector and broad platform impact warrant priority patching for Apple ecosystem deployments.
Use-after-free memory corruption in Apple operating systems allows high confidentiality impact through unexpected system termination. Affects iOS/iPadOS versions before 18.7.9 and 26.5, macOS Sequoia before 15.7.7, macOS Sonoma before 14.8.7, macOS Tahoe before 26.5, tvOS before 26.5, visionOS before 26.5, and watchOS before 26.5. Vendor-released patches are available across all affected platforms. EPSS score of 0.02% (7th percentile) indicates low observed exploitation probability in the wild, and no public exploit identified at time of analysis. CVSS vector indicates network-reachable attack surface with no authentication required, though the description states only 'an app' can trigger the condition, suggesting conflicting attack vector classification.
Memory corruption in WebKit across Apple's ecosystem enables confidentiality breach via malicious web content without user interaction. Affects iOS/iPadOS versions prior to 18.7.9 and 26.5, macOS Tahoe prior to 26.5, and all Apple operating systems (tvOS, visionOS, watchOS) prior to 26.5. Despite CVSS 7.5 (High), the EPSS score of 0.03% (10th percentile) indicates minimal real-world exploitation likelihood at time of analysis. No active exploitation confirmed (not in CISA KEV), and no public exploit code identified. Apple has released patches across all affected platforms.
Information disclosure in Apple WebKit's web content processing engine allows remote attackers to read sensitive memory contents via maliciously crafted web pages. This buffer overflow vulnerability (CWE-119) affects all major Apple platforms including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS prior to their respective patched versions. The CVSS vector AV:N/AC:L/PR:N/UI:N indicates trivial network-based exploitation requiring no authentication or user interaction, though the impact is limited to confidentiality (C:H/I:N/A:N) rather than the process crash described by Apple. EPSS score of 0.03% (10th percentile) suggests low observed exploitation probability despite the ease of exploitation. No CISA KEV listing or public POC identified at time of analysis. Apple has released patches across all affected platforms.
Kernel memory layout disclosure in Apple iOS, iPadOS, macOS, tvOS, and watchOS allows a malicious application to read sensitive log data that exposes kernel address information, enabling KASLR bypass. The flaw stems from insufficient redaction of kernel pointers written to system logs (CWE-532) and was reported and patched by Apple across its operating system families. No public exploit identified at time of analysis and EPSS probability is very low (0.02%), but the issue is typically chained with memory-corruption bugs to achieve reliable kernel exploitation.
Memory-corruption crash in Apple's WebKit web-content engine lets a malicious website terminate the content-rendering process across iOS/iPadOS, macOS, tvOS, visionOS and watchOS prior to the 26.5 (and 18.7.9) releases. The flaw is triggered simply by viewing attacker-controlled web content, requiring no authentication but one user action (opening a page). There is no public exploit identified at time of analysis and SSVC rates exploitation as none, though the assigned CVSS 8.8 reflects worst-case memory-corruption potential rather than the crash-only behavior Apple documents.
Memory-safety corruption (CWE-119) in Apple's web content engine allows a remote attacker who lures a victim to a malicious page to crash the WebKit rendering process across iOS/iPadOS, macOS Tahoe, tvOS, visionOS and watchOS. Reported by Apple and fixed in iOS/iPadOS 18.7.9 and 26.5 and the 26.5 releases of the other platforms; there is no public exploit identified at time of analysis, EPSS is very low (0.03%), and CISA SSVC records exploitation status as none. Note a signal conflict: the NVD vector claims full confidentiality/integrity/availability impact (C:H/I:H/A:H) while Apple's description substantiates only 'an unexpected process crash.'
Denial of service in Apple operating systems (iOS/iPadOS, macOS, tvOS, visionOS, watchOS) allows a locally-installed malicious or malformed app to trigger a buffer overflow (CWE-120) that causes unexpected system termination. Impact is availability-only with no confirmed code execution or data disclosure. There is no public exploit identified at time of analysis, EPSS is very low (0.03%), and the flaw is not listed in CISA KEV; Apple has released fixes across all affected platforms.
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.