Overview 8,685 matches · 5 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
8,685matches
5in Waratek scope0.1%
1protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
1
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
4
0.0%
Outside Waratek scope
23
0.3%
Not applicable
8,657
99.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.0%
partly blocked
0
0.0%
not blocked
8,684
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
8,685
100.0%
split by
peak 1,136 / year
19961
Not applicable1
High1
not blocked1
No public exploit1
19971
Not applicable1
Medium1
not blocked1
No public exploit1
19982
Not applicable2
High1
Medium1
not blocked2
No public exploit2
19995
Not applicable5
Medium4
Low1
not blocked5
No public exploit5
20003
Not applicable3
High2
Medium1
not blocked3
No public exploit3
200110
No exploit published1
Not applicable9
High6
Medium1
Low3
not blocked10
No public exploit10
200218
Outside Waratek scope1
Not applicable17
Critical1
High8
Medium8
Low1
not blocked18
No public exploit18
200339
Not applicable39
High15
Medium22
Low2
not blocked39
No public exploit39
200457
Not applicable57
Critical1
High29
Medium21
Low6
not blocked57
No public exploit57
2005132
Not applicable132
Critical1
High51
Medium57
Low23
not blocked132
No public exploit132
2006118
Not applicable118
High36
Medium63
Low19
not blocked118
No public exploit118
2007168
Not applicable168
High88
Medium76
Low4
not blocked168
No public exploit168
2008200
Not applicable200
Critical2
High74
Medium105
Low19
not blocked200
No public exploit200
2009203
Not applicable203
Critical1
High79
Medium111
Low12
not blocked203
No public exploit203
2010294
Not applicable294
Critical2
High115
Medium165
Low12
not blocked294
No public exploit294
2011291
Not applicable291
High149
Medium124
Low18
not blocked291
No public exploit291
2012344
Not applicable344
High168
Medium162
Low14
not blocked344
No public exploit344
2013187
Not applicable187
High34
Medium125
Low28
not blocked187
No public exploit187
2014298
Not applicable298
High75
Medium182
Low41
not blocked298
No public exploit298
2015664
Outside Waratek scope1
Not applicable663
High199
Medium409
Low56
not blocked664
No public exploit664
2016292
Outside Waratek scope1
Not applicable291
Critical23
High159
Medium87
Low23
not blocked292
No public exploit292
2017472
Outside Waratek scope3
Not applicable469
Critical37
High273
Medium134
Low28
not blocked472
No public exploit472
2018167
Outside Waratek scope2
Not applicable165
Critical11
High92
Medium61
Low3
not blocked167
No public exploit167
2019461
Protected by Waratek1
Outside Waratek scope5
Not applicable455
Critical37
High260
Medium145
Low19
blocked by ARMR today1
not blocked460
No public exploit461
2020469
Outside Waratek scope2
Not applicable467
Critical30
High260
Medium154
Low25
not blocked469
No public exploit469
2021554
Outside Waratek scope1
Not applicable553
Critical27
High307
Medium200
Low20
not blocked554
No public exploit554
2022407
No exploit published3
Outside Waratek scope2
Not applicable402
Critical25
High237
Medium133
Low12
not blocked407
No public exploit407
2023424
Outside Waratek scope1
Not applicable423
Critical22
High159
Medium206
Low37
not blocked424
No public exploit424
2024573
Outside Waratek scope2
Not applicable571
Critical25
High201
Medium300
Low47
not blocked573
No public exploit573
2025695
Outside Waratek scope1
Not applicable694
Critical98
High179
Medium380
Low38
not blocked695
No public exploit695
20261,136
Outside Waratek scope1
Not applicable1,135
Critical80
High396
Medium611
Low49
not blocked1,136
No public exploit1,136
19961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-86992 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted video file may lead to unexpected app termination. |
| CVE-2026-86991 | High | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted file may lead to unexpected process termination. |
| CVE-2026-86990 | Medium | 2026-10-26 | Not applicable | No public exploit | An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, visionOS 27.2. A malicious app may be able to access the camera without user permission. |
| CVE-2026-86989 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to fingerprint the user. |
| CVE-2026-86988 | Medium | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted image may result in disclosure of process memory. |
| CVE-2026-86987 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access sensitive user data. |
| CVE-2026-86986 | High | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to an unexpected Safari crash. |
| CVE-2026-86985 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved input validation. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash. |
| CVE-2026-86984 | Medium | 2026-10-26 | Not applicable | No public exploit | A file access issue existed with certain home folder files. This was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access information about a user's contacts. |
| CVE-2026-86978 | Low | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-86974 | High | 2026-10-26 | Not applicable | No public exploit | A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption. |
| CVE-2026-86973 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. Processing maliciously crafted web content may lead to an unexpected process crash. |
| CVE-2026-86972 | High | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted audio file may lead to memory corruption. |
| CVE-2026-86971 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted image may lead to unexpected app termination. |
| CVE-2026-86970 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may result in the disclosure of process memory. |
| CVE-2026-86969 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-86968 | High | 2026-10-26 | Not applicable | No public exploit | An access issue was addressed with improved access control. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A malicious app may be able to access restricted system interfaces or launder launch attribution. |
| CVE-2026-86966 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to modify protected parts of the file system. |
| CVE-2026-86964 | High | 2026-10-26 | Not applicable | No public exploit | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination. |
| CVE-2026-86958 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code. |
| CVE-2026-86954 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination. |
| CVE-2026-86946 | High | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-86945 | High | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to create files in protected directories. |
| CVE-2026-86943 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause a denial-of-service. |
| CVE-2026-86942 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to cause a denial-of-service. |
| CVE-2026-86941 | Medium | 2026-10-26 | Not applicable | No public exploit | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks. |
| CVE-2026-86939 | Medium | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. An attacker with root privileges may be able to access protected user data. |
| CVE-2026-86937 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may bypass Gatekeeper checks. |
| CVE-2026-86936 | High | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges. |
| CVE-2026-86931 | Medium | 2026-10-26 | Not applicable | No public exploit | A privacy issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data. |
| CVE-2026-86929 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted file may lead to arbitrary code execution. |
| CVE-2026-86925 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-86923 | Low | 2026-10-26 | Not applicable | No public exploit | An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data. |
| CVE-2026-86920 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to access sensitive user data. |
| CVE-2026-86916 | High | 2026-10-26 | Not applicable | No public exploit | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2. An app may be able to execute arbitrary code with kernel privileges. |
| CVE-2026-86896 | High | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges. |
| CVE-2026-86880 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data. |
| CVE-2026-86877 | Medium | 2026-10-26 | Not applicable | No public exploit | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to delete files for which it does not have privileges. |
| CVE-2026-84634 | Medium | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to cause unexpected system termination or write kernel memory. |
| CVE-2026-84633 | Critical | 2026-10-26 | Not applicable | No public exploit | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. |
| CVE-2026-84627 | High | 2026-10-26 | Not applicable | No public exploit | A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, visionOS 27. Processing a maliciously crafted image may lead to heap corruption. |
| CVE-2026-84614 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An attacker with physical access may be able to access contacts from the lock screen. |
| CVE-2026-84610 | Medium | 2026-10-26 | Not applicable | No public exploit | A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks. |
| CVE-2026-84605 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to read the device's name. |
| CVE-2026-84604 | High | 2026-10-26 | Not applicable | No public exploit | A stack buffer overflow was addressed through improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted audit file may corrupt process memory. |
| CVE-2026-84599 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-84595 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27. An app may be able to cause unexpected system termination. |
| CVE-2026-84594 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27. An app may be able to access sensitive user data. |
| CVE-2026-84590 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A remote attacker may be able to cause unexpected app termination or heap corruption. |
| CVE-2026-84545 | High | 2026-10-26 | Not applicable | No public exploit | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges. |
| CVE-2026-84542 | Medium | 2026-10-26 | Not applicable | No public exploit | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to read files outside of its sandbox. |
| CVE-2026-84539 | Critical | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to cause unexpected system termination. |
| CVE-2026-84528 | Low | 2026-10-26 | Not applicable | No public exploit | A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data. |
| CVE-2026-84498 | Medium | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to disclose kernel memory. |
| CVE-2026-84496 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-84495 | High | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or write kernel memory. |
| CVE-2026-84494 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An app may be able to cause unexpected system termination or write kernel memory. |
| CVE-2026-84493 | Medium | 2026-10-26 | Not applicable | No public exploit | An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A malicious app may be able to access Bluetooth without user consent. |
| CVE-2026-65397 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-65392 | Medium | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app with root privileges may be able to access private information. |
| CVE-2026-65385 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination. |
| CVE-2026-65384 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may cause an unexpected process termination. |
| CVE-2026-65373 | High | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious app may be able to gain root privileges. |
| CVE-2026-65368 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted disk image may bypass Gatekeeper checks. |
| CVE-2026-65363 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to break out of its sandbox. |
| CVE-2026-65350 | High | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-65327 | High | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A local attacker may be able to elevate their privileges. |
| CVE-2026-64789 | Medium | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A malicious application may bypass Gatekeeper checks. |
| CVE-2026-64759 | High | 2026-10-26 | Not applicable | No public exploit | An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution. |
| CVE-2026-64750 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption. |
| CVE-2026-43736 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7.2. An app may be able to access sensitive user data. |
| CVE-2026-113952 | Medium | 2026-10-26 | Not applicable | No public exploit | A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode. |
| CVE-2026-113950 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory. |
| CVE-2026-113949 | High | 2026-10-26 | Not applicable | No public exploit | A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to memory corruption. |
| CVE-2026-113948 | Medium | 2026-10-26 | Not applicable | No public exploit | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27.2. An app may be able to modify protected parts of the file system. |
| CVE-2026-113947 | High | 2026-10-26 | Not applicable | No public exploit | This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden Gate 27.2. Unpacking a maliciously crafted archive may lead to unexpected app termination or arbitrary code execution. |
| CVE-2026-113946 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-113945 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-113944 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-113943 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-113942 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-113941 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or read kernel memory. |
| CVE-2026-113940 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-113939 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-113938 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-113937 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-113936 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-113935 | Medium | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination. |
| CVE-2026-113934 | High | 2026-10-26 | Not applicable | No public exploit | The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2. An app may be able to cause unexpected system termination or corrupt kernel memory. |
| CVE-2026-113915 | Medium | 2026-10-26 | Not applicable | No public exploit | A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-113914 | Medium | 2026-10-26 | Not applicable | No public exploit | An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-113913 | Medium | 2026-10-26 | Not applicable | No public exploit | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing web content may disclose sensitive information. |
| CVE-2026-113912 | High | 2026-10-26 | Not applicable | No public exploit | An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. |
| CVE-2026-113910 | Medium | 2026-10-26 | Not applicable | No public exploit | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to disclose kernel memory. |
| CVE-2026-113909 | High | 2026-10-26 | Not applicable | No public exploit | A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. An attacker in physical proximity may be able to corrupt process memory. |
| CVE-2026-113908 | Medium | 2026-10-26 | Not applicable | No public exploit | A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data. |
| CVE-2026-113907 | Medium | 2026-10-26 | Not applicable | No public exploit | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app may be able to cause unexpected system termination or corrupt process memory. |
| CVE-2026-113906 | Medium | 2026-10-26 | Not applicable | No public exploit | A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service. |
| CVE-2026-113904 | Medium | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to an unexpected process crash. |
| CVE-2026-113903 | Medium | 2026-10-26 | Not applicable | No public exploit | A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to unexpected memory modification. |