{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Apple heeft meerdere kwetsbaarheden verholpen in macOS, met name in de versies Golden Gate 27.2, Sequoia 15.8.2, Tahoe 26.7.2 en Monterey 12.4.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden betroffen diverse beveiligingsaspecten binnen macOS, waaronder onvoldoende validatie van symbolische links (symlinks), onjuiste permissiecontroles, onvolledige autorisatiemechanismen, en fouten in geheugenbeheer zoals out-of-bounds reads en writes, use-after-free, buffer overflows, en race conditions. Deze fouten konden door lokale of remote aanvallers worden misbruikt om privileges te escaleren, sandbox-beperkingen te omzeilen, gevoelige gebruikersdata of kernelgeheugen te benaderen, of om denial-of-service condities te veroorzaken door onverwachte systeem- of applicatiecrashes. \n\nDaarnaast werden problemen opgelost in Gatekeeper, de beveiligingscomponent die code-integriteit en app-verificatie afdwingt, waarbij bypasses werden voorkomen. Ook werden kwetsbaarheden in de verwerking van diverse bestandstypen zoals afbeeldingen, video’s, audio, fonts, PDF’s en ZIP-archieven aangepakt om geheugenbeschadiging en ongeautoriseerde code-uitvoering te voorkomen.\n\nDe fixes omvatten verbeterde validatie van invoer, strengere toegangscontroles, verbeterde geheugenbeheer en state management, en het versterken van sandbox- en privacymechanismen. De updates zijn ook doorgevoerd in andere Apple-platforms zoals tvOS, visionOS en watchOS, waarbij consistentie in beveiligingsverbeteringen werd nagestreefd.", "title": "Interpretaties" }, { "category": "description", "text": "Apple heeft updates uitgebracht voor macOS Golden Gate 27.2, Sequoia 15.8.2, Tahoe 26.7.2, Monterey 12.4 en andere versies om de beschreven kwetsbaarheden te verhelpen. Deze updates bevatten verbeterde validatie- en beveiligingsmechanismen die de integriteit, stabiliteit en privacy van het systeem versterken. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "title": "CWE-120" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "title": "CWE-362" }, { "category": "general", "text": "Insecure Temporary File", "title": "CWE-377" }, { "category": "general", "text": "Double Free", "title": "CWE-415" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "general", "text": "Incorrect Authorization", "title": "CWE-863" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/149521" }, { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/149522" }, { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/149523" } ], "title": "Kwetsbaarheden verholpen in Apple MacOS", "tracking": { "current_release_date": "2026-10-27T08:05:01.630016Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2026-0455", "initial_release_date": "2026-10-27T08:05:01.630016Z", "revision_history": [ { "date": "2026-10-27T08:05:01.630016Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "macOS" } ], "category": "vendor", "name": "Apple" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-26704", "notes": [ { "category": "description", "text": "macOS Monterey 12.4 addressed a security vulnerability by enhancing symlink validation to prevent applications from gaining elevated privileges through improper symlink handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2022-26704 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-26704.json" } ], "title": "CVE-2022-26704" }, { "cve": "CVE-2026-20648", "notes": [ { "category": "description", "text": "A privacy vulnerability allowing malicious applications to access notifications from other iCloud devices was resolved by relocating sensitive data to a protected area in macOS Sequoia 15.8.2 and macOS Tahoe 26.3.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-20648 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20648.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-20648" }, { "cve": "CVE-2026-20649", "cwe": { "id": "CWE-377", "name": "Insecure Temporary File" }, "notes": [ { "category": "other", "text": "Insecure Temporary File", "title": "CWE-377" }, { "category": "description", "text": "A logging issue that could expose sensitive user information was fixed with improved data redaction across multiple Apple operating systems including iOS 26.3, iPadOS 26.3, macOS Sequoia 15.8.2, macOS Tahoe 26.3, tvOS 26.3, and watchOS 26.3.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-20649 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20649.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-20649" }, { "cve": "CVE-2026-28864", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "other", "text": "Incorrect Authorization", "title": "CWE-863" }, { "category": "description", "text": "A permissions vulnerability in iOS, iPadOS, macOS, visionOS, and watchOS allowed local attackers to access users' Keychain items, which has been resolved through improved permissions checking.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-28864 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28864.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "baseScore": 3.3, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-28864" }, { "cve": "CVE-2026-28991", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating system versions was fixed by implementing improved bounds checking, preventing potential denial-of-service attacks caused by malicious applications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-28991 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28991.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-28991" }, { "cve": "CVE-2026-43736", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved by enhanced state management in macOS Golden Gate 27 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-43736 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43736.json" } ], "title": "CVE-2026-43736" }, { "cve": "CVE-2026-64750", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption was addressed through enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-64750 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64750.json" } ], "title": "CVE-2026-64750" }, { "cve": "CVE-2026-64767", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "other", "text": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "title": "CWE-120" }, { "category": "description", "text": "A buffer overflow vulnerability in specific macOS versions was fixed by improving bounds checking to prevent remote attackers from causing system crashes or kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-64767 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64767.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-64767" }, { "cve": "CVE-2026-64789", "notes": [ { "category": "description", "text": "A vulnerability allowing malicious applications to bypass Gatekeeper checks was addressed by enhancing file attribute validation in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-64789 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64789.json" } ], "title": "CVE-2026-64789" }, { "cve": "CVE-2026-65327", "notes": [ { "category": "description", "text": "A logic flaw allowing local privilege escalation was resolved through enhanced validation in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65327 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65327.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-65327" }, { "cve": "CVE-2026-65350", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption was fixed through improved memory management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65350 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65350.json" } ], "title": "CVE-2026-65350" }, { "cve": "CVE-2026-65363", "notes": [ { "category": "description", "text": "An issue allowing an app to potentially escape its sandbox was addressed through enhanced validation in iOS 26.7.2, iPadOS 26.7.2, iOS 27, iPadOS 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65363 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65363.json" } ], "title": "CVE-2026-65363" }, { "cve": "CVE-2026-65368", "notes": [ { "category": "description", "text": "A logic flaw in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2 allowed malicious disk images to bypass Gatekeeper checks, which was resolved through enhanced validation.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65368 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65368.json" } ], "title": "CVE-2026-65368" }, { "cve": "CVE-2026-65373", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing malicious applications to gain root privileges was addressed with enhanced restrictions in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65373 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65373.json" } ], "title": "CVE-2026-65373" }, { "cve": "CVE-2026-65384", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by enhancing input validation to prevent remote attackers from causing unexpected process termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65384 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65384.json" } ], "title": "CVE-2026-65384" }, { "cve": "CVE-2026-65392", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing apps with root privileges to access private data was addressed in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7 through enhanced access restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65392 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65392.json" } ], "title": "CVE-2026-65392" }, { "cve": "CVE-2026-65397", "notes": [ { "category": "description", "text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management across multiple Apple OS versions including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65397 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65397.json" } ], "title": "CVE-2026-65397" }, { "cve": "CVE-2026-84494", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability allowing unexpected system termination or kernel memory corruption was fixed with improved bounds checking in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84494 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84494.json" } ], "title": "CVE-2026-84494" }, { "cve": "CVE-2026-84495", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination or writing kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84495 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84495.json" } ], "title": "CVE-2026-84495" }, { "cve": "CVE-2026-84496", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 was addressed by improved bounds checking to prevent system termination or kernel memory corruption from malicious disk images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84496 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84496.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-84496" }, { "cve": "CVE-2026-84498", "notes": [ { "category": "description", "text": "An issue allowing an app to potentially disclose kernel memory was resolved through improved memory handling in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84498 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84498.json" } ], "title": "CVE-2026-84498" }, { "cve": "CVE-2026-84528", "notes": [ { "category": "description", "text": "An issue in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2 that allowed apps to access sensitive user data via logging was resolved by enhancing data redaction.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84528 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84528.json" } ], "title": "CVE-2026-84528" }, { "cve": "CVE-2026-84539", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected system termination was addressed by enhanced bounds checking in macOS Golden Gate 27 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84539 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84539.json" } ], "title": "CVE-2026-84539" }, { "cve": "CVE-2026-84542", "notes": [ { "category": "description", "text": "An access control vulnerability allowing an application to read files outside its sandbox was addressed through enhanced access restrictions in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84542 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84542.json" } ], "title": "CVE-2026-84542" }, { "cve": "CVE-2026-84545", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2 allowed sandboxed apps to escape restrictions and execute code with root privileges, fixed via improved memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84545 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84545.json" } ], "title": "CVE-2026-84545" }, { "cve": "CVE-2026-84590", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by enhancing bounds checking to prevent remote attackers from causing app termination or heap corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84590 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84590.json" } ], "title": "CVE-2026-84590" }, { "cve": "CVE-2026-84595", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected system termination was fixed through improved bounds checking in multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84595 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84595.json" } ], "title": "CVE-2026-84595" }, { "cve": "CVE-2026-84604", "notes": [ { "category": "description", "text": "A stack buffer overflow vulnerability in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by improving input validation to prevent process memory corruption from malicious audit files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84604 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84604.json" } ], "title": "CVE-2026-84604" }, { "cve": "CVE-2026-84610", "notes": [ { "category": "description", "text": "A file quarantine bypass vulnerability in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2 allowed malicious ZIP archives to circumvent Gatekeeper checks, which was addressed by implementing additional security validations.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84610 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84610.json" } ], "title": "CVE-2026-84610" }, { "cve": "CVE-2026-84627", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing heap corruption when processing malicious images has been fixed with improved bounds checking in Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27, and others.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84627 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84627.json" } ], "title": "CVE-2026-84627" }, { "cve": "CVE-2026-86896", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing malicious applications to gain root privileges has been addressed with enhanced restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86896 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86896.json" } ], "title": "CVE-2026-86896" }, { "cve": "CVE-2026-86916", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use after free vulnerability in multiple versions of iOS, iPadOS, and macOS was addressed by Apple through improved memory management to prevent arbitrary code execution with kernel privileges.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86916 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86916.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-86916" }, { "cve": "CVE-2026-86920", "notes": [ { "category": "description", "text": "An authorization issue allowing unauthorized app access to sensitive user data was resolved through improved state management across multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86920 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86920.json" } ], "title": "CVE-2026-86920" }, { "cve": "CVE-2026-86923", "notes": [ { "category": "description", "text": "An information disclosure vulnerability in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by implementing enhanced privacy controls to prevent unauthorized access to sensitive user data by applications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86923 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86923.json" } ], "title": "CVE-2026-86923" }, { "cve": "CVE-2026-86925", "notes": [ { "category": "description", "text": "An authorization flaw allowing potential exposure of sensitive user data was resolved by enhancing state management in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86925 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86925.json" } ], "title": "CVE-2026-86925" }, { "cve": "CVE-2026-86929", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "An out-of-bounds write vulnerability allowing arbitrary code execution via malicious file processing was addressed through enhanced bounds checking in macOS Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86929 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86929.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-86929" }, { "cve": "CVE-2026-86931", "notes": [ { "category": "description", "text": "A privacy vulnerability allowing unauthorized app access to sensitive user data was resolved through enhanced memory management in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86931 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86931.json" } ], "title": "CVE-2026-86931" }, { "cve": "CVE-2026-86936", "notes": [ { "category": "description", "text": "A logic flaw allowing apps to gain root privileges was resolved through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86936 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86936.json" } ], "title": "CVE-2026-86936" }, { "cve": "CVE-2026-86937", "notes": [ { "category": "description", "text": "A logic flaw in macOS Gatekeeper was resolved by enhancing state management in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2, preventing apps from bypassing security checks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86937 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86937.json" } ], "title": "CVE-2026-86937" }, { "cve": "CVE-2026-86939", "notes": [ { "category": "description", "text": "A permissions vulnerability in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 that allowed root users to access protected user data was resolved by implementing stricter access controls.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86939 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86939.json" } ], "title": "CVE-2026-86939" }, { "cve": "CVE-2026-86941", "notes": [ { "category": "description", "text": "A file quarantine bypass vulnerability in macOS was addressed by enhancing Gatekeeper checks in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 to prevent apps from circumventing security controls.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86941 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86941.json" } ], "title": "CVE-2026-86941" }, { "cve": "CVE-2026-86942", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing denial-of-service was addressed through enhanced bounds checking in Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27, and related updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86942 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86942.json" } ], "title": "CVE-2026-86942" }, { "cve": "CVE-2026-86943", "notes": [ { "category": "description", "text": "A denial-of-service vulnerability in macOS Golden Gate 27.2 was addressed by enhancing memory management to prevent potential remote exploitation.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86943 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86943.json" } ], "title": "CVE-2026-86943" }, { "cve": "CVE-2026-86945", "notes": [ { "category": "description", "text": "A vulnerability allowing malicious applications to create files in protected directories was addressed through enhanced validation in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86945 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86945.json" } ], "title": "CVE-2026-86945" }, { "cve": "CVE-2026-86946", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption was addressed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 via enhanced memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86946 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86946.json" } ], "title": "CVE-2026-86946" }, { "cve": "CVE-2026-86954", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious images was fixed via improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86954 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86954.json" } ], "title": "CVE-2026-86954" }, { "cve": "CVE-2026-86958", "notes": [ { "category": "description", "text": "A memory handling vulnerability allowing attackers with memory write access to bypass pointer authentication codes and execute arbitrary code has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86958 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86958.json" } ], "title": "CVE-2026-86958" }, { "cve": "CVE-2026-86964", "notes": [ { "category": "description", "text": "A null pointer dereference vulnerability causing unexpected system termination was fixed through improved input validation across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, and watchOS 27.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86964 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86964.json" } ], "title": "CVE-2026-86964" }, { "cve": "CVE-2026-86966", "notes": [ { "category": "description", "text": "A symlink handling vulnerability allowing apps to modify protected file system areas was fixed across multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS in versions 26.7.2, 27, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86966 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86966.json" } ], "title": "CVE-2026-86966" }, { "cve": "CVE-2026-86968", "notes": [ { "category": "description", "text": "An access control vulnerability allowing malicious apps to access restricted system interfaces or manipulate launch attribution was fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86968 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86968.json" } ], "title": "CVE-2026-86968" }, { "cve": "CVE-2026-86969", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability affecting multiple versions of iOS, iPadOS, and macOS was addressed by Apple through enhanced input validation to prevent system crashes and kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86969 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86969.json" } ], "title": "CVE-2026-86969" }, { "cve": "CVE-2026-86970", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems related to processing maliciously crafted fonts was fixed by improving input validation to prevent potential disclosure of process memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86970 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86970.json" } ], "title": "CVE-2026-86970" }, { "cve": "CVE-2026-86971", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing maliciously crafted images was fixed through improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86971 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86971.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-86971" }, { "cve": "CVE-2026-86972", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing potential memory corruption when processing malicious audio files was fixed by improved size validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86972 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86972.json" } ], "title": "CVE-2026-86972" }, { "cve": "CVE-2026-86973", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing potential process crashes when processing malicious web content was fixed with improved bounds checking in Safari, iOS, iPadOS, and macOS Golden Gate versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86973 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86973.json" } ], "title": "CVE-2026-86973" }, { "cve": "CVE-2026-86974", "notes": [ { "category": "description", "text": "A type confusion vulnerability causing potential memory corruption when processing malicious web content was fixed in multiple Apple operating systems including Safari, iOS, iPadOS, macOS Golden Gate, and visionOS versions 27.2 and 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86974 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86974.json" } ], "title": "CVE-2026-86974" }, { "cve": "CVE-2026-86978", "notes": [ { "category": "description", "text": "Apple addressed a vulnerability in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and tvOS 27.2 that previously allowed applications to access sensitive user data by implementing enhanced validation checks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86978 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86978.json" } ], "title": "CVE-2026-86978" }, { "cve": "CVE-2026-86984", "notes": [ { "category": "description", "text": "A file access vulnerability allowing unauthorized apps to access user contact information was addressed with enhanced access restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86984 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86984.json" } ], "title": "CVE-2026-86984" }, { "cve": "CVE-2026-86985", "notes": [ { "category": "description", "text": "Apple fixed an issue causing unexpected process crashes from malicious web content by improving input validation across Safari, iOS, iPadOS, macOS Golden Gate, and tvOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86985 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86985.json" } ], "title": "CVE-2026-86985" }, { "cve": "CVE-2026-86986", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed through improved memory management across multiple Apple OS versions including Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86986 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86986.json" } ], "title": "CVE-2026-86986" }, { "cve": "CVE-2026-86988", "notes": [ { "category": "description", "text": "A vulnerability allowing process memory disclosure via maliciously crafted images was fixed with improved validation checks in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86988 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86988.json" } ], "title": "CVE-2026-86988" }, { "cve": "CVE-2026-86990", "notes": [ { "category": "description", "text": "Multiple versions of iOS, iPadOS, macOS, and visionOS addressed an access issue that allowed malicious apps to access the camera without user permission through improved restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86990 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86990.json" } ], "title": "CVE-2026-86990" }, { "cve": "CVE-2026-86991", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing unexpected process termination when handling malicious files has been addressed with enhanced bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86991 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86991.json" } ], "title": "CVE-2026-86991" }, { "cve": "CVE-2026-86992", "notes": [ { "category": "description", "text": "Apple addressed an issue causing unexpected app termination when processing maliciously crafted video files by improving memory handling across multiple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27.2, and others.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86992 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86992.json" } ], "title": "CVE-2026-86992" }, { "cve": "CVE-2026-112410", "notes": [ { "category": "description", "text": "A double free vulnerability causing potential unexpected process termination was addressed through improved memory management in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112410 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112410.json" } ], "title": "CVE-2026-112410" }, { "cve": "CVE-2026-112413", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking, preventing potential application crashes from maliciously crafted files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112413 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112413.json" } ], "title": "CVE-2026-112413" }, { "cve": "CVE-2026-112414", "notes": [ { "category": "description", "text": "A stack overflow vulnerability causing denial-of-service via malicious message processing was fixed through improved input validation in Apple iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112414 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112414.json" } ], "title": "CVE-2026-112414" }, { "cve": "CVE-2026-112415", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability affecting iOS 26.7.2, iPadOS 26.7.2, and macOS was fixed by enhancing input validation to prevent apps from causing unexpected system termination or memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112415 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112415.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112415" }, { "cve": "CVE-2026-112416", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing malicious video files was fixed by improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112416 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112416.json" } ], "title": "CVE-2026-112416" }, { "cve": "CVE-2026-112421", "notes": [ { "category": "description", "text": "A race condition in symbolic link handling allowing modification of protected file system areas was fixed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112421 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112421.json" } ], "title": "CVE-2026-112421" }, { "cve": "CVE-2026-112423", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhanced bounds checking, preventing potential denial-of-service or memory disclosure from maliciously crafted files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112423 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112423.json" } ], "title": "CVE-2026-112423" }, { "cve": "CVE-2026-112424", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by enhancing bounds checking to prevent system termination or kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112424 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112424.json" } ], "title": "CVE-2026-112424" }, { "cve": "CVE-2026-112425", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in 3D model processing was addressed by Apple through enhanced bounds checking in iOS, iPadOS, macOS, tvOS, and visionOS updates 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112425 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112425.json" } ], "title": "CVE-2026-112425" }, { "cve": "CVE-2026-112427", "notes": [ { "category": "description", "text": "An authentication vulnerability in macOS Golden Gate 27.2 was addressed by enhancing state management to prevent potential remote arbitrary code execution.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112427 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112427.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112427" }, { "cve": "CVE-2026-112428", "notes": [ { "category": "description", "text": "A logic flaw allowing applications to bypass Gatekeeper checks was resolved through enhanced verification in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112428 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112428.json" } ], "title": "CVE-2026-112428" }, { "cve": "CVE-2026-112429", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability allowing disclosure of process memory via malicious file processing was addressed through enhanced bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112429 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112429.json" } ], "title": "CVE-2026-112429" }, { "cve": "CVE-2026-112430", "notes": [ { "category": "description", "text": "An authentication vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by enhancing user attribute validation to prevent unauthorized root privilege escalation.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112430 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112430.json" } ], "title": "CVE-2026-112430" }, { "cve": "CVE-2026-112432", "notes": [ { "category": "description", "text": "A logging vulnerability allowing potential access to sensitive user data was addressed through enhanced data redaction in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112432 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112432.json" } ], "title": "CVE-2026-112432" }, { "cve": "CVE-2026-112434", "notes": [ { "category": "description", "text": "A logic flaw allowing apps to gain root privileges was resolved through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112434 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112434.json" } ], "title": "CVE-2026-112434" }, { "cve": "CVE-2026-112437", "notes": [ { "category": "description", "text": "A logic flaw allowing apps to gain root privileges was resolved through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112437 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112437.json" } ], "title": "CVE-2026-112437" }, { "cve": "CVE-2026-112438", "notes": [ { "category": "description", "text": "A logic issue in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was fixed by improving state management to prevent unprivileged attackers from executing arbitrary code as root.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112438 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112438.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112438" }, { "cve": "CVE-2026-112441", "notes": [ { "category": "description", "text": "A vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 that allowed unauthorized app access to sensitive user data was resolved by removing the vulnerable code.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112441 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112441.json" } ], "title": "CVE-2026-112441" }, { "cve": "CVE-2026-112442", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing modification of protected file system areas was addressed with enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112442 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112442.json" } ], "title": "CVE-2026-112442" }, { "cve": "CVE-2026-112443", "notes": [ { "category": "description", "text": "An issue causing potential unexpected system termination or process memory corruption was resolved by implementing improved memory handling in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112443 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112443.json" } ], "title": "CVE-2026-112443" }, { "cve": "CVE-2026-112444", "notes": [ { "category": "description", "text": "An issue allowing an app to potentially bypass Gatekeeper checks was resolved through enhanced verification mechanisms in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112444 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112444.json" } ], "title": "CVE-2026-112444" }, { "cve": "CVE-2026-112446", "notes": [ { "category": "description", "text": "An issue allowing apps to potentially access sensitive user data was resolved by implementing additional entitlement checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 27.2 and related releases.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112446 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112446.json" } ], "title": "CVE-2026-112446" }, { "cve": "CVE-2026-112447", "notes": [ { "category": "description", "text": "An authorization issue allowing an app to bypass Privacy preferences was fixed through improved state management in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112447 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112447.json" } ], "title": "CVE-2026-112447" }, { "cve": "CVE-2026-112449", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing memory corruption when processing malicious 3D models was fixed via improved input validation in Apple iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112449 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112449.json" } ], "title": "CVE-2026-112449" }, { "cve": "CVE-2026-112451", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was fixed by improving bounds checking to prevent potential denial-of-service or memory disclosure by remote attackers.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112451 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112451.json" } ], "title": "CVE-2026-112451" }, { "cve": "CVE-2026-112453", "notes": [ { "category": "description", "text": "A path handling vulnerability allowing sandbox escape was fixed with improved validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112453 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112453.json" } ], "title": "CVE-2026-112453" }, { "cve": "CVE-2026-112454", "notes": [ { "category": "description", "text": "A memory handling flaw causing unexpected app termination or memory corruption when processing maliciously crafted video files was fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112454 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112454.json" } ], "title": "CVE-2026-112454" }, { "cve": "CVE-2026-112455", "notes": [ { "category": "description", "text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112455 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112455.json" } ], "title": "CVE-2026-112455" }, { "cve": "CVE-2026-112456", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing heap corruption was addressed through enhanced input validation in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112456 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112456.json" } ], "title": "CVE-2026-112456" }, { "cve": "CVE-2026-112457", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "other", "text": "Double Free", "title": "CWE-415" }, { "category": "description", "text": "A double free vulnerability causing potential system crashes or memory corruption was resolved in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 via enhanced memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112457 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112457.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "baseScore": 7.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112457" }, { "cve": "CVE-2026-112459", "notes": [ { "category": "description", "text": "A race condition causing potential system termination or kernel memory corruption was resolved by improved state handling in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112459 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112459.json" } ], "title": "CVE-2026-112459" }, { "cve": "CVE-2026-112461", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption in Apple operating systems was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112461 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112461.json" } ], "title": "CVE-2026-112461" }, { "cve": "CVE-2026-112462", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing malicious applications to bypass Privacy preferences was addressed with enhanced restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112462 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112462.json" } ], "title": "CVE-2026-112462" }, { "cve": "CVE-2026-112464", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing heap corruption was addressed via improved input validation in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS in versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112464 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112464.json" } ], "title": "CVE-2026-112464" }, { "cve": "CVE-2026-112466", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple OS versions including iOS 26.7.2 and macOS Golden Gate 27.2 was fixed by enhancing input validation to prevent apps from causing unexpected system termination or reading kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112466 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112466.json" } ], "title": "CVE-2026-112466" }, { "cve": "CVE-2026-112467", "notes": [ { "category": "description", "text": "An application vulnerability allowing bypass of network restrictions was addressed and fixed with enhanced verification mechanisms in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112467 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112467.json" } ], "title": "CVE-2026-112467" }, { "cve": "CVE-2026-112468", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential system termination or kernel memory corruption was addressed through improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112468 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112468.json" } ], "title": "CVE-2026-112468" }, { "cve": "CVE-2026-112469", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability was fixed by enhancing bounds checking across multiple Apple operating systems to prevent unexpected system termination or kernel memory corruption caused by malicious applications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112469 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112469.json" } ], "title": "CVE-2026-112469" }, { "cve": "CVE-2026-112470", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed by enhancing bounds checking to prevent unexpected system termination or kernel memory corruption caused by apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112470 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112470.json" } ], "title": "CVE-2026-112470" }, { "cve": "CVE-2026-112471", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing unexpected process termination when handling malicious images has been fixed via improved bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112471 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112471.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "baseScore": 4.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112471" }, { "cve": "CVE-2026-112473", "notes": [ { "category": "description", "text": "An authorization vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 allowed attackers with legacy VNC passwords to copy files via Screen Sharing, fixed by improved state management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112473 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112473.json" } ], "title": "CVE-2026-112473" }, { "cve": "CVE-2026-112474", "notes": [ { "category": "description", "text": "A use-after-free vulnerability allowing potential system termination or kernel memory write has been fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2 through improved memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112474 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112474.json" } ], "title": "CVE-2026-112474" }, { "cve": "CVE-2026-112475", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected system termination was addressed through enhanced bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112475 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112475.json" } ], "title": "CVE-2026-112475" }, { "cve": "CVE-2026-112476", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple Apple operating systems was fixed by implementing improved bounds checking to prevent applications from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112476 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112476.json" } ], "title": "CVE-2026-112476" }, { "cve": "CVE-2026-112477", "notes": [ { "category": "description", "text": "A race condition causing potential system termination or kernel memory corruption was resolved through enhanced locking in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112477 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112477.json" } ], "title": "CVE-2026-112477" }, { "cve": "CVE-2026-112478", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 was addressed by removing the vulnerable code to prevent unexpected system termination or kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112478 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112478.json" } ], "title": "CVE-2026-112478" }, { "cve": "CVE-2026-112479", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple OS versions was fixed by implementing improved bounds checking to prevent malicious USB devices from causing unexpected system termination or unauthorized kernel memory access.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112479 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112479.json" } ], "title": "CVE-2026-112479" }, { "cve": "CVE-2026-112480", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing users with screen sharing access to view other users' screens was resolved through additional restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112480 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112480.json" } ], "title": "CVE-2026-112480" }, { "cve": "CVE-2026-112481", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by improving bounds checking to prevent process termination or memory disclosure from local network attackers.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112481 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112481.json" } ], "title": "CVE-2026-112481" }, { "cve": "CVE-2026-112482", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability allowing local network attackers to corrupt process memory was addressed by enhanced bounds checking in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112482 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112482.json" } ], "title": "CVE-2026-112482" }, { "cve": "CVE-2026-112483", "notes": [ { "category": "description", "text": "A path handling vulnerability allowing modification of protected file system areas was fixed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 through enhanced validation.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112483 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112483.json" } ], "title": "CVE-2026-112483" }, { "cve": "CVE-2026-112484", "notes": [ { "category": "description", "text": "A vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 allowed arbitrary code execution with system privileges, fixed by improved file handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112484 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112484.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112484" }, { "cve": "CVE-2026-112485", "notes": [ { "category": "description", "text": "Memory corruption caused by processing maliciously crafted 3D models has been addressed with improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 27.2 and related updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112485 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112485.json" } ], "title": "CVE-2026-112485" }, { "cve": "CVE-2026-112486", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected application termination when processing 3D models was addressed by enhanced bounds checking in multiple versions of iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112486 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112486.json" } ], "title": "CVE-2026-112486" }, { "cve": "CVE-2026-112487", "notes": [ { "category": "description", "text": "A path handling vulnerability allowing privilege escalation to root was addressed through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112487 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112487.json" } ], "title": "CVE-2026-112487" }, { "cve": "CVE-2026-112488", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, macOS Tahoe, and visionOS versions 26.7.2 and 27.2 has been fixed to prevent process memory corruption from maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112488 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112488.json" } ], "title": "CVE-2026-112488" }, { "cve": "CVE-2026-112491", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination was addressed through improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112491 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112491.json" } ], "title": "CVE-2026-112491" }, { "cve": "CVE-2026-112492", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing privilege escalation to root was addressed through enhanced validation in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112492 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112492.json" } ], "title": "CVE-2026-112492" }, { "cve": "CVE-2026-112493", "notes": [ { "category": "description", "text": "A downgrade vulnerability allowing privilege escalation to root was addressed through enhanced version checks in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112493 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112493.json" } ], "title": "CVE-2026-112493" }, { "cve": "CVE-2026-112494", "notes": [ { "category": "description", "text": "A file quarantine bypass vulnerability in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 was addressed by implementing additional Gatekeeper checks to prevent apps from circumventing security controls.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112494 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112494.json" } ], "title": "CVE-2026-112494" }, { "cve": "CVE-2026-112495", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by enhancing bounds checking to prevent system termination or kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112495 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112495.json" } ], "title": "CVE-2026-112495" }, { "cve": "CVE-2026-112497", "notes": [ { "category": "description", "text": "A sandbox escape vulnerability was addressed by enhancing permissions checks in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112497 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112497.json" } ], "title": "CVE-2026-112497" }, { "cve": "CVE-2026-112498", "notes": [ { "category": "description", "text": "An access issue allowing an application to potentially escape its sandbox was addressed by implementing additional sandbox restrictions in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112498 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112498.json" } ], "title": "CVE-2026-112498" }, { "cve": "CVE-2026-112500", "notes": [ { "category": "description", "text": "A logic flaw in Apple's Hide My Email feature that could expose users' original email addresses was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2 through enhanced restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112500 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112500.json" } ], "title": "CVE-2026-112500" }, { "cve": "CVE-2026-112501", "notes": [ { "category": "description", "text": "A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management in Apple’s iOS, iPadOS, macOS, tvOS, visionOS, and watchOS updates 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112501 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112501.json" } ], "title": "CVE-2026-112501" }, { "cve": "CVE-2026-112502", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing denial-of-service was addressed through enhanced bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112502 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112502.json" } ], "title": "CVE-2026-112502" }, { "cve": "CVE-2026-112504", "notes": [ { "category": "description", "text": "A parsing vulnerability in directory path handling that allowed modification of protected file system areas was resolved through enhanced path validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112504 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112504.json" } ], "title": "CVE-2026-112504" }, { "cve": "CVE-2026-112505", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in Screen Sharing was addressed with improved bounds checking in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2 to prevent process memory corruption by malicious peers.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112505 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112505.json" } ], "title": "CVE-2026-112505" }, { "cve": "CVE-2026-112506", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2 addressed a permissions vulnerability by enhancing validation mechanisms to prevent unauthorized app access to sensitive user data.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112506 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112506.json" } ], "title": "CVE-2026-112506" }, { "cve": "CVE-2026-112508", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in specific macOS versions was fixed by implementing improved bounds checking to prevent applications from causing unexpected system termination or accessing kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112508 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112508.json" } ], "title": "CVE-2026-112508" }, { "cve": "CVE-2026-112510", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by Apple through enhanced bounds checking to prevent potential denial-of-service attacks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112510 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112510.json" } ], "title": "CVE-2026-112510" }, { "cve": "CVE-2026-112511", "notes": [ { "category": "description", "text": "A path handling vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 allowed a malicious Screen Sharing peer to create arbitrary symlinks as root, which has been addressed in recent updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112511 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112511.json" } ], "title": "CVE-2026-112511" }, { "cve": "CVE-2026-112512", "notes": [ { "category": "description", "text": "A path handling vulnerability allowing applications to bypass Gatekeeper checks was resolved through enhanced validation in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112512 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112512.json" } ], "title": "CVE-2026-112512" }, { "cve": "CVE-2026-112513", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2 fixed a sandbox escape vulnerability by enhancing symlink validation to prevent apps from breaking out of their restricted environments.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112513 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112513.json" } ], "title": "CVE-2026-112513" }, { "cve": "CVE-2026-112514", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent potential system crashes and kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112514 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112514.json" } ], "title": "CVE-2026-112514" }, { "cve": "CVE-2026-112515", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple Apple operating systems was fixed by improving bounds checking to prevent unexpected system termination or unauthorized kernel memory access.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112515 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112515.json" } ], "title": "CVE-2026-112515" }, { "cve": "CVE-2026-112516", "notes": [ { "category": "description", "text": "A use-after-free vulnerability affecting multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112516 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112516.json" } ], "title": "CVE-2026-112516" }, { "cve": "CVE-2026-112517", "notes": [ { "category": "description", "text": "A use after free vulnerability affecting multiple Apple operating systems was fixed through improved memory management to prevent unexpected system termination or kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112517 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112517.json" } ], "title": "CVE-2026-112517" }, { "cve": "CVE-2026-112518", "notes": [ { "category": "description", "text": "A signature validation flaw allowing privileged network attackers to impersonate a Kerberos KDC was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112518 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112518.json" } ], "title": "CVE-2026-112518" }, { "cve": "CVE-2026-112519", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing denial-of-service when connecting to malicious VNC servers has been fixed via improved input validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112519 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112519.json" } ], "title": "CVE-2026-112519" }, { "cve": "CVE-2026-112521", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability allowing sandboxed processes to bypass restrictions was fixed via improved bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112521 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112521.json" } ], "title": "CVE-2026-112521" }, { "cve": "CVE-2026-112522", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected application termination was addressed through improved bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112522 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112522.json" } ], "title": "CVE-2026-112522" }, { "cve": "CVE-2026-112523", "notes": [ { "category": "description", "text": "A symlink handling vulnerability allowing unauthorized access to user-sensitive data has been resolved in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112523 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112523.json" } ], "title": "CVE-2026-112523" }, { "cve": "CVE-2026-112524", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in specific macOS versions was addressed by enhancing memory management to prevent applications from causing unexpected system termination or kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112524 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112524.json" } ], "title": "CVE-2026-112524" }, { "cve": "CVE-2026-112525", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in specific macOS versions was fixed by implementing improved bounds checking to prevent applications from causing unexpected system termination or accessing kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112525 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112525.json" } ], "title": "CVE-2026-112525" }, { "cve": "CVE-2026-112526", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing unexpected application termination was addressed through improved bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112526 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112526.json" } ], "title": "CVE-2026-112526" }, { "cve": "CVE-2026-112529", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in specific macOS versions was fixed by implementing improved bounds checking to prevent applications from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112529 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112529.json" } ], "title": "CVE-2026-112529" }, { "cve": "CVE-2026-112530", "notes": [ { "category": "description", "text": "A logic flaw allowing apps to gain root privileges was resolved through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112530 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112530.json" } ], "title": "CVE-2026-112530" }, { "cve": "CVE-2026-112531", "notes": [ { "category": "description", "text": "A use after free vulnerability causing unexpected system termination was resolved via improved memory management in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112531 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112531.json" } ], "title": "CVE-2026-112531" }, { "cve": "CVE-2026-112532", "notes": [ { "category": "description", "text": "A memory handling issue causing potential unexpected system termination or kernel memory corruption was fixed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112532 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112532.json" } ], "title": "CVE-2026-112532" }, { "cve": "CVE-2026-112533", "notes": [ { "category": "description", "text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112533 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112533.json" } ], "title": "CVE-2026-112533" }, { "cve": "CVE-2026-112534", "notes": [ { "category": "description", "text": "A sandbox bypass vulnerability in certain macOS versions has been addressed through enhanced access restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112534 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112534.json" } ], "title": "CVE-2026-112534" }, { "cve": "CVE-2026-112535", "notes": [ { "category": "description", "text": "A race condition in symbolic link handling allowing modification of protected file system areas was fixed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112535 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112535.json" } ], "title": "CVE-2026-112535" }, { "cve": "CVE-2026-112536", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in specific macOS versions was addressed by improved bounds checking to prevent applications from causing unexpected system termination or writing to kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112536 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112536.json" } ], "title": "CVE-2026-112536" }, { "cve": "CVE-2026-112537", "notes": [ { "category": "description", "text": "A vulnerability allowing unauthorized access to sensitive location information was resolved through enhanced data protection in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112537 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112537.json" } ], "title": "CVE-2026-112537" }, { "cve": "CVE-2026-112539", "notes": [ { "category": "description", "text": "A permissions vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by implementing additional restrictions to prevent malicious apps from accessing protected files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112539 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112539.json" } ], "title": "CVE-2026-112539" }, { "cve": "CVE-2026-112540", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing unexpected application termination when processing malicious files was fixed via improved input validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112540 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112540.json" } ], "title": "CVE-2026-112540" }, { "cve": "CVE-2026-112541", "notes": [ { "category": "description", "text": "A parsing vulnerability in directory path handling that could enable privilege escalation to root was addressed through enhanced path validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112541 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112541.json" } ], "title": "CVE-2026-112541" }, { "cve": "CVE-2026-112542", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 addressed a permissions vulnerability that could enable malicious applications to intercept network traffic by implementing additional restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112542 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112542.json" } ], "title": "CVE-2026-112542" }, { "cve": "CVE-2026-112543", "notes": [ { "category": "description", "text": "A race condition vulnerability was mitigated through additional validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 to prevent malicious applications from escaping their sandbox environments.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112543 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112543.json" } ], "title": "CVE-2026-112543" }, { "cve": "CVE-2026-112544", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2 was addressed by enhancing bounds checking to prevent system crashes triggered by mounting malicious disk images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112544 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112544.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112544" }, { "cve": "CVE-2026-112545", "notes": [ { "category": "description", "text": "A parsing vulnerability in directory path handling that could enable privilege escalation to root was addressed through enhanced path validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112545 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112545.json" } ], "title": "CVE-2026-112545" }, { "cve": "CVE-2026-112546", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple OS versions was fixed by enhancing bounds checking to prevent unexpected application termination caused by maliciously crafted files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112546 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112546.json" } ], "title": "CVE-2026-112546" }, { "cve": "CVE-2026-112548", "notes": [ { "category": "description", "text": "A use-after-free vulnerability allowing privilege escalation to root was addressed via enhanced memory management in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112548 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112548.json" } ], "title": "CVE-2026-112548" }, { "cve": "CVE-2026-112550", "notes": [ { "category": "description", "text": "A type confusion vulnerability causing denial-of-service was addressed by enhanced memory handling in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112550 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112550.json" } ], "title": "CVE-2026-112550" }, { "cve": "CVE-2026-112551", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing applications to access sensitive location data was resolved through enhanced state management in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112551 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112551.json" } ], "title": "CVE-2026-112551" }, { "cve": "CVE-2026-112552", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 was addressed by improving bounds checking to prevent unexpected system termination caused by a network file server attacker.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112552 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112552.json" } ], "title": "CVE-2026-112552" }, { "cve": "CVE-2026-112553", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected application termination when processing malicious files was addressed through improved bounds checking in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112553 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112553.json" } ], "title": "CVE-2026-112553" }, { "cve": "CVE-2026-112554", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting iOS, iPadOS, and macOS was addressed by enhancing bounds checking to prevent system crashes and potential kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112554 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112554.json" } ], "title": "CVE-2026-112554" }, { "cve": "CVE-2026-112555", "notes": [ { "category": "description", "text": "A validation issue was resolved by enhancing input sanitization in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 to prevent malicious applications from escaping their sandbox environments.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112555 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112555.json" } ], "title": "CVE-2026-112555" }, { "cve": "CVE-2026-112556", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "title": "CWE-362" }, { "category": "description", "text": "A race condition vulnerability enabling arbitrary code execution in code-signed applications was addressed through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112556 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112556.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 4.8, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112556" }, { "cve": "CVE-2026-112557", "notes": [ { "category": "description", "text": "A vulnerability allowing malicious applications to bypass Privacy preferences was addressed with enhanced checks in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112557 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112557.json" } ], "title": "CVE-2026-112557" }, { "cve": "CVE-2026-112558", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing unauthorized app access to sensitive user data was addressed by implementing enhanced sandbox restrictions in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112558 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112558.json" } ], "title": "CVE-2026-112558" }, { "cve": "CVE-2026-112559", "notes": [ { "category": "description", "text": "Apple fixed an authorization vulnerability affecting multiple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS through improved state management in versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112559 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112559.json" } ], "title": "CVE-2026-112559" }, { "cve": "CVE-2026-112560", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in image processing was addressed by Apple through enhanced bounds checking across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, preventing potential process memory disclosure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112560 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112560.json" } ], "title": "CVE-2026-112560" }, { "cve": "CVE-2026-112561", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in image processing was fixed by Apple through improved bounds checking across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, preventing potential process memory disclosure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112561 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112561.json" } ], "title": "CVE-2026-112561" }, { "cve": "CVE-2026-112562", "notes": [ { "category": "description", "text": "A parsing vulnerability in directory path handling that could enable a malicious app to escape its sandbox was addressed by enhanced path validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112562 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112562.json" } ], "title": "CVE-2026-112562" }, { "cve": "CVE-2026-112563", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing malicious files has been fixed with improved bounds checking in multiple Apple operating systems including macOS Golden Gate 27.2 and tvOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112563 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112563.json" } ], "title": "CVE-2026-112563" }, { "cve": "CVE-2026-112565", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing memory corruption when processing malicious 3D models was fixed via improved input validation in Apple’s iOS, iPadOS, macOS, and visionOS versions 26.7, 27.2, and related updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112565 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112565.json" } ], "title": "CVE-2026-112565" }, { "cve": "CVE-2026-112566", "notes": [ { "category": "description", "text": "A null pointer dereference vulnerability in multiple Apple OS versions was fixed by improved validation to prevent potential denial-of-service attacks by attackers in physical proximity.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112566 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112566.json" } ], "title": "CVE-2026-112566" }, { "cve": "CVE-2026-112567", "notes": [ { "category": "description", "text": "An issue allowing a malicious application to bypass Privacy preferences was resolved through enhanced checks in multiple Apple operating systems including iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112567 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112567.json" } ], "title": "CVE-2026-112567" }, { "cve": "CVE-2026-112568", "notes": [ { "category": "description", "text": "A logic flaw allowing maliciously crafted files to bypass Gatekeeper checks was resolved in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112568 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112568.json" } ], "title": "CVE-2026-112568" }, { "cve": "CVE-2026-112569", "notes": [ { "category": "description", "text": "An access issue allowing an application to potentially escape its sandbox was addressed by implementing additional sandbox restrictions in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112569 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112569.json" } ], "title": "CVE-2026-112569" }, { "cve": "CVE-2026-112570", "notes": [ { "category": "description", "text": "An access issue allowing an application to potentially escape its sandbox was addressed by implementing additional sandbox restrictions in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112570 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112570.json" } ], "title": "CVE-2026-112570" }, { "cve": "CVE-2026-112571", "notes": [ { "category": "description", "text": "A memory initialization vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed in updates 26.7.2, 27.2, and 15.8.2 to prevent process memory disclosure via maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112571 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112571.json" } ], "title": "CVE-2026-112571" }, { "cve": "CVE-2026-112575", "notes": [ { "category": "description", "text": "A vulnerability allowing apps to monitor keystrokes without user permission due to insecure handling of secure input state was fixed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112575 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112575.json" } ], "title": "CVE-2026-112575" }, { "cve": "CVE-2026-112576", "notes": [ { "category": "description", "text": "A memory integrity vulnerability involving copy-on-write pages was fixed across multiple OS versions, including iOS 16.7.2 and iPadOS 16.7.2, preventing applications from causing unexpected modifications to this memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112576 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112576.json" } ], "title": "CVE-2026-112576" }, { "cve": "CVE-2026-112577", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2 addressed a privacy vulnerability by relocating sensitive user data to prevent unauthorized app access.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112577 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112577.json" } ], "title": "CVE-2026-112577" }, { "cve": "CVE-2026-112593", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Sequoia 15.8.2 and macOS Tahoe 26.7.2 was addressed by enhanced bounds checking to prevent system termination or kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112593 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112593.json" } ], "title": "CVE-2026-112593" }, { "cve": "CVE-2026-112595", "notes": [ { "category": "description", "text": "An authentication vulnerability in Thread network access was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and tvOS 27.2, preventing attackers in physical proximity from exploiting malicious network traffic.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112595 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112595.json" } ], "title": "CVE-2026-112595" }, { "cve": "CVE-2026-112596", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing unexpected system termination when processing malicious video files has been fixed with improved bounds checking in multiple Apple operating systems version 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112596 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112596.json" } ], "title": "CVE-2026-112596" }, { "cve": "CVE-2026-112599", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari 27.2 and related OS versions was fixed by improving memory management to prevent unexpected process crashes caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112599 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112599.json" } ], "title": "CVE-2026-112599" }, { "cve": "CVE-2026-112601", "notes": [ { "category": "description", "text": "An integer overflow vulnerability in macOS Sequoia 15.8.2 was addressed by enhancing input validation to prevent potential denial-of-service conditions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112601 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112601.json" } ], "title": "CVE-2026-112601" }, { "cve": "CVE-2026-112604", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious files was addressed by improved bounds checking in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112604 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112604.json" } ], "title": "CVE-2026-112604" }, { "cve": "CVE-2026-112606", "notes": [ { "category": "description", "text": "A type confusion vulnerability causing potential unexpected system termination was resolved by enhancing memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112606 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112606.json" } ], "title": "CVE-2026-112606" }, { "cve": "CVE-2026-112607", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability allowing remote memory leakage was addressed through enhanced bounds checking in iOS 27.2, iPadOS 27.2, and macOS Golden Gate 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112607 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112607.json" } ], "title": "CVE-2026-112607" }, { "cve": "CVE-2026-112610", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption when processing malicious PDF files has been addressed with enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112610 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112610.json" } ], "title": "CVE-2026-112610" }, { "cve": "CVE-2026-112611", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption when processing malicious PDF files has been addressed with enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112611 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112611.json" } ], "title": "CVE-2026-112611" }, { "cve": "CVE-2026-112614", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing malicious images was fixed with improved bounds checking in iOS, iPadOS, and macOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112614 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112614.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112614" }, { "cve": "CVE-2026-112615", "notes": [ { "category": "description", "text": "A use-after-free vulnerability affecting multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112615 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112615.json" } ], "title": "CVE-2026-112615" }, { "cve": "CVE-2026-112616", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2 by enhancing access control mechanisms.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112616 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112616.json" } ], "title": "CVE-2026-112616" }, { "cve": "CVE-2026-112617", "notes": [ { "category": "description", "text": "An information disclosure vulnerability in macOS Golden Gate 27.2 was addressed by improving logic to prevent unauthorized access to sensitive user data.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112617 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112617.json" } ], "title": "CVE-2026-112617" }, { "cve": "CVE-2026-112619", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in processing malicious calendar invitations was addressed by enhancing bounds checking to prevent memory corruption in multiple Apple operating systems.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112619 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112619.json" } ], "title": "CVE-2026-112619" }, { "cve": "CVE-2026-112620", "notes": [ { "category": "description", "text": "A denial-of-service vulnerability exploitable by attackers in privileged network positions was addressed via improved input validation in Apple’s iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112620 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112620.json" } ], "title": "CVE-2026-112620" }, { "cve": "CVE-2026-112621", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent memory corruption caused by maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112621 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112621.json" } ], "title": "CVE-2026-112621" }, { "cve": "CVE-2026-112622", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in specific iOS, iPadOS, and macOS versions was fixed by improving bounds checking to prevent attackers within radio range from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112622 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112622.json" } ], "title": "CVE-2026-112622" }, { "cve": "CVE-2026-112623", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112623 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112623.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112623" }, { "cve": "CVE-2026-112624", "notes": [ { "category": "description", "text": "An issue allowing apps to bypass Privacy preferences was resolved through enhanced checks in iOS, iPadOS, macOS Golden Gate, Sequoia, Tahoe, and visionOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112624 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112624.json" } ], "title": "CVE-2026-112624" }, { "cve": "CVE-2026-112625", "notes": [ { "category": "description", "text": "An integer underflow vulnerability causing potential memory corruption when processing malicious images was addressed via improved input validation in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112625 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112625.json" } ], "title": "CVE-2026-112625" }, { "cve": "CVE-2026-112626", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by improving memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112626 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112626.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112626" }, { "cve": "CVE-2026-112627", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in image processing was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS to prevent potential process memory disclosure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112627 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112627.json" } ], "title": "CVE-2026-112627" }, { "cve": "CVE-2026-112628", "notes": [ { "category": "description", "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS received updates addressing an issue that allowed apps to access sensitive user data through enhanced data access restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112628 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112628.json" } ], "title": "CVE-2026-112628" }, { "cve": "CVE-2026-112629", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious images was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112629 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112629.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112629" }, { "cve": "CVE-2026-112630", "notes": [ { "category": "description", "text": "An uninitialized memory vulnerability in image processing was addressed in multiple versions of iOS, iPadOS, and macOS, potentially allowing disclosure of process memory when handling maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112630 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112630.json" } ], "title": "CVE-2026-112630" }, { "cve": "CVE-2026-112632", "notes": [ { "category": "description", "text": "An uninitialized memory vulnerability in image processing was addressed in multiple Apple operating systems, including iOS, iPadOS, macOS, and visionOS, preventing potential disclosure of process memory when handling malicious images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112632 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112632.json" } ], "title": "CVE-2026-112632" }, { "cve": "CVE-2026-112633", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in image processing was addressed through enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS, preventing unexpected application termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112633 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112633.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112633" }, { "cve": "CVE-2026-112634", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious images was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112634 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112634.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112634" }, { "cve": "CVE-2026-112637", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in Safari 27.2 and related Apple operating systems was fixed to prevent arbitrary code execution triggered by processing malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112637 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112637.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112637" }, { "cve": "CVE-2026-112638", "notes": [ { "category": "description", "text": "A heap buffer overflow vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking, preventing attackers within radio range from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112638 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112638.json" } ], "title": "CVE-2026-112638" }, { "cve": "CVE-2026-112639", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112639 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112639.json" } ], "title": "CVE-2026-112639" }, { "cve": "CVE-2026-112640", "notes": [ { "category": "description", "text": "A use-after-free vulnerability affecting multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent memory corruption from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112640 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112640.json" } ], "title": "CVE-2026-112640" }, { "cve": "CVE-2026-112642", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was fixed by improving bounds checking to prevent process memory disclosure via maliciously crafted fonts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112642 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112642.json" } ], "title": "CVE-2026-112642" }, { "cve": "CVE-2026-112647", "notes": [ { "category": "description", "text": "An access issue allowing an application to potentially access sensitive user data was resolved by implementing additional sandbox restrictions in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112647 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112647.json" } ], "title": "CVE-2026-112647" }, { "cve": "CVE-2026-112651", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems including Safari, iOS, iPadOS, macOS Golden Gate, and visionOS was fixed by improved memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112651 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112651.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112651" }, { "cve": "CVE-2026-112652", "notes": [ { "category": "description", "text": "A logic flaw in state management allowing malicious apps to bypass certificate validation was resolved across multiple Apple OS versions including iOS, iPadOS, macOS Golden Gate, Sequoia, Tahoe, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112652 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112652.json" } ], "title": "CVE-2026-112652" }, { "cve": "CVE-2026-112653", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential process termination when processing malicious web content was fixed through improved memory management in multiple Apple OS versions including Safari, iOS, iPadOS, macOS Golden Gate, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112653 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112653.json" } ], "title": "CVE-2026-112653" }, { "cve": "CVE-2026-112654", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112654 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112654.json" } ], "title": "CVE-2026-112654" }, { "cve": "CVE-2026-112655", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by improving memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112655 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112655.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112655" }, { "cve": "CVE-2026-112656", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking to prevent potential disclosure of process memory from maliciously crafted fonts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112656 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112656.json" } ], "title": "CVE-2026-112656" }, { "cve": "CVE-2026-112658", "notes": [ { "category": "description", "text": "An input validation vulnerability in iOS 27.2, iPadOS 27.2, and macOS Golden Gate 27.2 was addressed to prevent apps from potentially accessing sensitive user data.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112658 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112658.json" } ], "title": "CVE-2026-112658" }, { "cve": "CVE-2026-112659", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "description", "text": "A type confusion vulnerability in multiple Apple operating systems was fixed by enhancing memory handling to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112659 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112659.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112659" }, { "cve": "CVE-2026-112660", "notes": [ { "category": "description", "text": "An authorization flaw allowing applications to bypass Privacy preferences was resolved via enhanced state management across multiple Apple OS versions including iOS, iPadOS, macOS, and visionOS updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112660 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112660.json" } ], "title": "CVE-2026-112660" }, { "cve": "CVE-2026-112665", "notes": [ { "category": "description", "text": "An information disclosure vulnerability allowing apps to determine kernel memory layout was resolved through improved state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112665 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112665.json" } ], "title": "CVE-2026-112665" }, { "cve": "CVE-2026-112666", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112666 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112666.json" } ], "title": "CVE-2026-112666" }, { "cve": "CVE-2026-112668", "notes": [ { "category": "description", "text": "A logic flaw allowing apps to gain root privileges was resolved through enhanced validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112668 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112668.json" } ], "title": "CVE-2026-112668" }, { "cve": "CVE-2026-112669", "notes": [ { "category": "description", "text": "A race condition vulnerability in Safari 27.2 and related OS versions was fixed by improving state handling to prevent unexpected crashes triggered by maliciously crafted web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112669 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112669.json" } ], "title": "CVE-2026-112669" }, { "cve": "CVE-2026-112670", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing heap corruption during malicious file processing was addressed via enhanced input validation in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112670 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112670.json" } ], "title": "CVE-2026-112670" }, { "cve": "CVE-2026-112671", "notes": [ { "category": "description", "text": "A resource exhaustion vulnerability in Apple operating systems including iOS 15.8.2, iPadOS 26.7.2, macOS 27.2, and visionOS 27.2 was addressed through enhanced input validation to prevent denial-of-service attacks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112671 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112671.json" } ], "title": "CVE-2026-112671" }, { "cve": "CVE-2026-112672", "notes": [ { "category": "description", "text": "A vulnerability in macOS Gatekeeper allowed malicious ZIP archives to bypass security checks, fixed in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2 through enhanced validation mechanisms.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112672 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112672.json" } ], "title": "CVE-2026-112672" }, { "cve": "CVE-2026-112673", "notes": [ { "category": "description", "text": "A type confusion vulnerability in multiple Apple operating systems was addressed by enhancing state handling to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112673 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112673.json" } ], "title": "CVE-2026-112673" }, { "cve": "CVE-2026-112675", "notes": [ { "category": "description", "text": "An issue allowing an app to potentially access sensitive user data was resolved by implementing additional entitlement checks in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112675 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112675.json" } ], "title": "CVE-2026-112675" }, { "cve": "CVE-2026-112676", "notes": [ { "category": "description", "text": "An entitlement check vulnerability allowing potential unauthorized access to the Photos Library was addressed in multiple Apple OS versions including iOS, iPadOS, macOS, and visionOS updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112676 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112676.json" } ], "title": "CVE-2026-112676" }, { "cve": "CVE-2026-112677", "notes": [ { "category": "description", "text": "An authorization vulnerability enabling arbitrary code execution with system privileges was addressed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2 by enhancing access control mechanisms.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112677 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112677.json" } ], "title": "CVE-2026-112677" }, { "cve": "CVE-2026-112678", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing unauthorized app access to sensitive user data was resolved with enhanced restrictions across multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112678 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112678.json" } ], "title": "CVE-2026-112678" }, { "cve": "CVE-2026-112679", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption was fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2 via improved memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112679 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112679.json" } ], "title": "CVE-2026-112679" }, { "cve": "CVE-2026-112680", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent potential disclosure of process memory from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112680 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112680.json" } ], "title": "CVE-2026-112680" }, { "cve": "CVE-2026-112682", "notes": [ { "category": "description", "text": "An input validation vulnerability allowing remote attackers to cause unexpected app termination was fixed by Apple in iOS, iPadOS, macOS, visionOS, and watchOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112682 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112682.json" } ], "title": "CVE-2026-112682" }, { "cve": "CVE-2026-112683", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in font processing was addressed through enhanced bounds checking in Apple operating systems including iOS, iPadOS, macOS, and visionOS, preventing potential app crashes or memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112683 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112683.json" } ], "title": "CVE-2026-112683" }, { "cve": "CVE-2026-112684", "notes": [ { "category": "description", "text": "An issue causing unexpected process crashes from processing maliciously crafted web content was resolved through improved state management across multiple Apple operating systems and Safari versions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112684 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112684.json" } ], "title": "CVE-2026-112684" }, { "cve": "CVE-2026-112685", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112685 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112685.json" } ], "title": "CVE-2026-112685" }, { "cve": "CVE-2026-112686", "notes": [ { "category": "description", "text": "A race condition vulnerability in multiple Apple operating systems and Safari was fixed by improving locking mechanisms to prevent unexpected process termination caused by maliciously crafted web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112686 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112686.json" } ], "title": "CVE-2026-112686" }, { "cve": "CVE-2026-112688", "notes": [ { "category": "description", "text": "A memory corruption vulnerability affecting iOS, iPadOS, and macOS that could lead to unexpected app termination or arbitrary code execution has been addressed through improved memory handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112688 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112688.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112688" }, { "cve": "CVE-2026-112689", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability affecting multiple OS versions was fixed by enhancing input validation to prevent unexpected system termination or kernel memory corruption caused by applications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112689 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112689.json" } ], "title": "CVE-2026-112689" }, { "cve": "CVE-2026-112690", "notes": [ { "category": "description", "text": "An input validation vulnerability in the WebContent sandbox was fixed across multiple Apple operating systems, including iOS, iPadOS, macOS, and visionOS, preventing remote attackers from escaping sandbox restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112690 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112690.json" } ], "title": "CVE-2026-112690" }, { "cve": "CVE-2026-112693", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari was addressed by enhancing memory management across multiple OS versions to prevent crashes triggered by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112693 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112693.json" } ], "title": "CVE-2026-112693" }, { "cve": "CVE-2026-112695", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112695 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112695.json" } ], "title": "CVE-2026-112695" }, { "cve": "CVE-2026-112696", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability was addressed by enhancing bounds checking across multiple OS versions, including iOS 27.2 and macOS updates, preventing unexpected system termination or kernel memory corruption caused by apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112696 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112696.json" } ], "title": "CVE-2026-112696" }, { "cve": "CVE-2026-112697", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by improving memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112697 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112697.json" } ], "title": "CVE-2026-112697" }, { "cve": "CVE-2026-112698", "notes": [ { "category": "description", "text": "A memory handling vulnerability in multiple versions of iOS, iPadOS, and macOS was addressed to prevent apps from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112698 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112698.json" } ], "title": "CVE-2026-112698" }, { "cve": "CVE-2026-112699", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent potential disclosure of process memory from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112699 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112699.json" } ], "title": "CVE-2026-112699" }, { "cve": "CVE-2026-112704", "notes": [ { "category": "description", "text": "An information leakage vulnerability allowing sandbox escape was addressed through enhanced validation in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112704 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112704.json" } ], "title": "CVE-2026-112704" }, { "cve": "CVE-2026-112705", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability was addressed through enhanced bounds checking across multiple operating system versions to prevent applications from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112705 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112705.json" } ], "title": "CVE-2026-112705" }, { "cve": "CVE-2026-112708", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "other", "text": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "title": "CWE-362" }, { "category": "description", "text": "A race condition causing potential system termination or memory corruption was resolved through enhanced locking mechanisms in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112708 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112708.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "baseScore": 5.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-112708" }, { "cve": "CVE-2026-113896", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113896 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113896.json" } ], "title": "CVE-2026-113896" }, { "cve": "CVE-2026-113897", "notes": [ { "category": "description", "text": "A remote code execution vulnerability allowing sandbox escape in Web Content was fixed by removing the vulnerable code in Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113897 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113897.json" } ], "title": "CVE-2026-113897" }, { "cve": "CVE-2026-113898", "notes": [ { "category": "description", "text": "A logging issue was fixed by enhancing data redaction across multiple OS versions to prevent malicious applications from bypassing Privacy preferences.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113898 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113898.json" } ], "title": "CVE-2026-113898" }, { "cve": "CVE-2026-113899", "notes": [ { "category": "description", "text": "An issue causing unexpected system termination in certain macOS versions was resolved through enhanced validation checks in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113899 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113899.json" } ], "title": "CVE-2026-113899" }, { "cve": "CVE-2026-113900", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing privilege escalation to root was resolved by enhanced state handling in macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113900 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113900.json" } ], "title": "CVE-2026-113900" }, { "cve": "CVE-2026-113901", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2 was fixed by enhancing memory management to prevent unexpected process crashes triggered by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113901 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113901.json" } ], "title": "CVE-2026-113901" }, { "cve": "CVE-2026-113903", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari, iOS, iPadOS, macOS Golden Gate, and visionOS 27.2 was fixed by enhancing memory management to prevent malicious web content from causing unexpected memory modifications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113903 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113903.json" } ], "title": "CVE-2026-113903" }, { "cve": "CVE-2026-113904", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process crashes caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113904 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113904.json" } ], "title": "CVE-2026-113904" }, { "cve": "CVE-2026-113907", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability affecting multiple Apple operating systems was fixed by enhancing memory handling to prevent unexpected system termination or memory corruption caused by apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113907 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113907.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-113907" }, { "cve": "CVE-2026-113909", "notes": [ { "category": "description", "text": "A memory corruption vulnerability allowing physical proximity attackers to corrupt process memory was fixed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, and visionOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113909 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113909.json" } ], "title": "CVE-2026-113909" }, { "cve": "CVE-2026-113910", "notes": [ { "category": "description", "text": "A memory initialization issue affecting multiple OS versions was fixed to enhance memory handling and prevent applications from potentially disclosing kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113910 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113910.json" } ], "title": "CVE-2026-113910" }, { "cve": "CVE-2026-113912", "notes": [ { "category": "description", "text": "An out-of-bounds access vulnerability was fixed by enhancing bounds checking to prevent application crashes or memory corruption caused by malicious media files across multiple operating system versions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113912 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113912.json" } ], "title": "CVE-2026-113912" }, { "cve": "CVE-2026-113913", "notes": [ { "category": "description", "text": "An input validation vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS was fixed to prevent potential disclosure of sensitive information.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113913 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113913.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-113913" }, { "cve": "CVE-2026-113915", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113915 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113915.json" } ], "title": "CVE-2026-113915" }, { "cve": "CVE-2026-113934", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2 addresses a critical issue involving unexpected system termination and kernel memory corruption caused by improper memory handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113934 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113934.json" } ], "title": "CVE-2026-113934" }, { "cve": "CVE-2026-113935", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113935 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113935.json" } ], "title": "CVE-2026-113935" }, { "cve": "CVE-2026-113936", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113936 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113936.json" } ], "title": "CVE-2026-113936" }, { "cve": "CVE-2026-113937", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113937 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113937.json" } ], "title": "CVE-2026-113937" }, { "cve": "CVE-2026-113938", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113938 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113938.json" } ], "title": "CVE-2026-113938" }, { "cve": "CVE-2026-113939", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2 was addressed by enhancing bounds checking to prevent system crashes and kernel memory corruption from malicious disk images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113939 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113939.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-113939" }, { "cve": "CVE-2026-113940", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113940 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113940.json" } ], "title": "CVE-2026-113940" }, { "cve": "CVE-2026-113941", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by enhancing bounds checking to prevent unexpected system termination or kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113941 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113941.json" } ], "title": "CVE-2026-113941" }, { "cve": "CVE-2026-113942", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by enhancing bounds checking to prevent unexpected system termination or kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113942 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113942.json" } ], "title": "CVE-2026-113942" }, { "cve": "CVE-2026-113943", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2 was addressed by enhancing bounds checking to prevent system crashes and kernel memory corruption from malicious disk images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113943 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113943.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-113943" }, { "cve": "CVE-2026-113944", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by enhancing bounds checking to prevent unexpected system termination or kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113944 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113944.json" } ], "title": "CVE-2026-113944" }, { "cve": "CVE-2026-113945", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113945 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113945.json" } ], "title": "CVE-2026-113945" }, { "cve": "CVE-2026-113946", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in macOS Golden Gate 27.2 was addressed by implementing improved bounds checking to prevent unexpected system termination or kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113946 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113946.json" } ], "title": "CVE-2026-113946" }, { "cve": "CVE-2026-113947", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2 addressed a security issue by enhancing access restrictions to prevent potential app termination or arbitrary code execution from unpacking malicious archives.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113947 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113947.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1" ] } ], "title": "CVE-2026-113947" }, { "cve": "CVE-2026-113948", "notes": [ { "category": "description", "text": "macOS Golden Gate 27.2 addressed a permissions vulnerability that previously allowed applications to modify protected file system areas by implementing stricter access controls.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113948 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113948.json" } ], "title": "CVE-2026-113948" }, { "cve": "CVE-2026-113949", "notes": [ { "category": "description", "text": "A type confusion vulnerability in multiple Apple operating systems was fixed by enhancing state management to prevent potential memory corruption from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113949 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113949.json" } ], "title": "CVE-2026-113949" }, { "cve": "CVE-2026-113950", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in font processing was fixed by enhancing bounds checking across multiple Apple operating systems to prevent app crashes and memory corruption caused by malicious fonts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113950 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113950.json" } ], "title": "CVE-2026-113950" }, { "cve": "CVE-2026-113952", "notes": [ { "category": "description", "text": "A logic issue was fixed in Safari 27.2, iOS 26.7.2/27.2, iPadOS 26.7.2/27.2, and macOS Golden Gate 27.2 to improve checks preventing websites from using media formats restricted in Lockdown Mode.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113952 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113952.json" } ], "title": "CVE-2026-113952" } ] }