Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Iphone Os
Total 4596 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-64755 1 Apple 2 Ipados, Iphone Os 2026-07-29 N/A 5.5 MEDIUM
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be able to access sensitive user data.
CVE-2026-64763 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 7.8 HIGH
An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2026-64765 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 7.8 HIGH
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2026-64772 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-29 N/A 9.8 CRITICAL
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. A remote attacker may be able to cause unexpected application termination or heap corruption.
CVE-2026-64775 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 9.8 CRITICAL
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-34691 5 Adobe, Apple, Google and 2 more 6 Experience Manager, Iphone Os, Macos and 3 more 2026-07-29 N/A 9.3 CRITICAL
Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
CVE-2026-34693 5 Adobe, Apple, Google and 2 more 6 Experience Manager, Iphone Os, Macos and 3 more 2026-07-29 N/A 8.0 HIGH
Adobe Experience Manager Forms JEE versions LTS SP1, 6.5.24.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
CVE-2026-43740 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-07-29 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may result in the disclosure of process memory.
CVE-2026-43769 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 9.8 CRITICAL
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64766 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 7.8 HIGH
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2026-64764 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 7.8 HIGH
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2026-64747 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-29 N/A 7.8 HIGH
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to execute arbitrary code with kernel privileges.
CVE-2026-43818 1 Apple 3 Ipados, Iphone Os, Macos 2026-07-29 N/A 8.8 HIGH
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Processing a maliciously crafted image may lead to arbitrary code execution.
CVE-2026-28931 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-29 N/A 8.8 HIGH
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. Connecting to a malicious NFS server may lead to kernel memory corruption.
CVE-2026-43812 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-28 N/A 9.8 CRITICAL
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43813 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-28 N/A 7.1 HIGH
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement.
CVE-2026-43814 1 Apple 5 Ipados, Iphone Os, Macos and 2 more 2026-07-28 N/A 9.8 CRITICAL
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-43822 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-28 N/A 9.8 CRITICAL
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.
CVE-2026-64693 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-28 N/A 5.5 MEDIUM
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted image may lead to a denial-of-service.
CVE-2026-64700 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-07-28 N/A 9.8 CRITICAL
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination.