{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden betreffen diverse beveiligingsproblemen zoals onvoldoende validatie van symbolische links, onjuiste permissiecontroles, out-of-bounds lees- en schrijffouten, use-after-free fouten, integer overflows, race conditions, type confusion, en logische fouten in state management. Deze kunnen leiden tot ongeautoriseerde toegang tot gevoelige gebruikersdata, geheugenbeschadiging, onverwachte systeem- of applicatiecrashes, privilege escalatie, sandbox escapes, en denial-of-service condities.\n\nAanvallers kunnen deze kwetsbaarheden misbruiken door speciaal vervaardigde bestanden, netwerkverkeer, of webcontent aan te bieden, of door lokale toegang te hebben tot het apparaat. De kwetsbaarheden zijn aanwezig in verschillende versies van de genoemde Apple besturingssystemen en beïnvloeden onder andere de verwerking van afbeeldingen, video’s, audio, fonts, PDF-bestanden, webcontent, en systeemcomponenten zoals de Keychain, Bluetooth, en Thread-netwerk.\n\nEr zijn geen specifieke proof-of-concept details vermeld, maar de beschrijvingen geven aan dat misbruik mogelijk is via diverse aanvalsvectoren.", "title": "Interpretaties" }, { "category": "description", "text": "Apple heeft updates uitgebracht voor iOS en iPadOS om de beschreven kwetsbaarheden te verhelpen. Gebruikers wordt geadviseerd deze updates te installeren om de beveiliging van hun systemen te verbeteren. Zie bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "general", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "general", "text": "Use After Free", "title": "CWE-416" }, { "category": "general", "text": "Improper Check for Unusual or Exceptional Conditions", "title": "CWE-754" }, { "category": "general", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "general", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "general", "text": "Incorrect Authorization", "title": "CWE-863" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/149225" }, { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/149227" }, { "category": "external", "summary": "Reference", "url": "https://support.apple.com/en-us/149230" } ], "title": "Kwetsbaarheden verholpen in Apple iOS en iPadOS", "tracking": { "current_release_date": "2026-10-27T08:05:28.446863Z", "generator": { "date": "2025-08-04T16:30:00Z", "engine": { "name": "V.A.", "version": "1.3" } }, "id": "NCSC-2026-0456", "initial_release_date": "2026-10-27T08:05:28.446863Z", "revision_history": [ { "date": "2026-10-27T08:05:28.446863Z", "number": "1.0.0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-1" } } ], "category": "product_name", "name": "iOS" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/*", "product": { "name": "vers:unknown/*", "product_id": "CSAFPID-2" } } ], "category": "product_name", "name": "iPadOS" } ], "category": "vendor", "name": "Apple" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-5598", "notes": [ { "category": "description", "text": "A vulnerability in FreeBSD's pf prior to certain versions allows crafted ICMP/ICMP6 packets to bypass packet filtering by failing to verify the outer packet's destination IP against the inner packet's source IP, potentially exposing protected hosts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2019-5598 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2019/cve-2019-5598.json" } ], "scores": [ { "cvss_v3": { "version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2019-5598" }, { "cve": "CVE-2022-26704", "notes": [ { "category": "description", "text": "macOS Monterey 12.4 addressed a security vulnerability by enhancing symlink validation to prevent applications from gaining elevated privileges through improper symlink handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2022-26704 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-26704.json" } ], "title": "CVE-2022-26704" }, { "cve": "CVE-2026-28864", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "notes": [ { "category": "other", "text": "Incorrect Authorization", "title": "CWE-863" }, { "category": "description", "text": "A permissions vulnerability in iOS, iPadOS, macOS, visionOS, and watchOS allowed local attackers to access users' Keychain items, which has been resolved through improved permissions checking.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-28864 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28864.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "baseScore": 3.3, "baseSeverity": "LOW" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-28864" }, { "cve": "CVE-2026-64750", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption was addressed through enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-64750 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64750.json" } ], "title": "CVE-2026-64750" }, { "cve": "CVE-2026-64759", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "other", "text": "Integer Overflow or Wraparound", "title": "CWE-190" }, { "category": "description", "text": "An integer overflow vulnerability enabling arbitrary code execution via crafted images was addressed through enhanced input validation in Apple iOS 26.7.2 and 27, iPadOS 26.7.2 and 27, and multiple macOS versions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-64759 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64759.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-64759" }, { "cve": "CVE-2026-65339", "notes": [ { "category": "description", "text": "A logic flaw allowing apps to leak sensitive user information was resolved through enhanced validation checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65339 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65339.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.0, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-65339" }, { "cve": "CVE-2026-65350", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption was fixed through improved memory management in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65350 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65350.json" } ], "title": "CVE-2026-65350" }, { "cve": "CVE-2026-65363", "notes": [ { "category": "description", "text": "An issue allowing an app to potentially escape its sandbox was addressed through enhanced validation in iOS 26.7.2, iPadOS 26.7.2, iOS 27, iPadOS 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8.2, and Tahoe 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65363 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65363.json" } ], "title": "CVE-2026-65363" }, { "cve": "CVE-2026-65385", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption and application crashes was addressed by enhanced bounds checking in iOS, iPadOS, visionOS, and watchOS versions 26.7.2, 27.2, and 27.2 respectively.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65385 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65385.json" } ], "title": "CVE-2026-65385" }, { "cve": "CVE-2026-65397", "notes": [ { "category": "description", "text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management across multiple Apple OS versions including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-65397 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65397.json" } ], "title": "CVE-2026-65397" }, { "cve": "CVE-2026-84493", "notes": [ { "category": "description", "text": "An authentication vulnerability allowing unauthorized Bluetooth access by malicious apps was resolved in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2 through enhanced state management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84493 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84493.json" } ], "title": "CVE-2026-84493" }, { "cve": "CVE-2026-84494", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability allowing unexpected system termination or kernel memory corruption was fixed with improved bounds checking in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84494 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84494.json" } ], "title": "CVE-2026-84494" }, { "cve": "CVE-2026-84495", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination or writing kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84495 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84495.json" } ], "title": "CVE-2026-84495" }, { "cve": "CVE-2026-84594", "notes": [ { "category": "description", "text": "A logic flaw in state management that could permit unauthorized access to sensitive user data was addressed in iOS 26.7.2, iPadOS 26.7.2, iOS 27, and iPadOS 27.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84594 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84594.json" } ], "title": "CVE-2026-84594" }, { "cve": "CVE-2026-84599", "notes": [ { "category": "description", "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27, and related updates have addressed a critical issue involving potential unexpected system termination or kernel memory corruption due to improper memory handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84599 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84599.json" } ], "title": "CVE-2026-84599" }, { "cve": "CVE-2026-84605", "notes": [ { "category": "description", "text": "An authorization flaw allowing apps to potentially access the device's name was resolved via enhanced state management in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84605 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84605.json" } ], "title": "CVE-2026-84605" }, { "cve": "CVE-2026-84614", "notes": [ { "category": "description", "text": "A logic flaw allowing unauthorized access to contacts from the lock screen with physical access was resolved in iOS 26.7.2, iPadOS 26.7.2, iOS 27, and iPadOS 27.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84614 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84614.json" } ], "title": "CVE-2026-84614" }, { "cve": "CVE-2026-84627", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing heap corruption when processing malicious images has been fixed with improved bounds checking in Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27, and others.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-84627 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84627.json" } ], "title": "CVE-2026-84627" }, { "cve": "CVE-2026-86880", "notes": [ { "category": "description", "text": "Apple fixed an issue in iOS 26.7.2, iPadOS 26.7.2, iOS 27, and iPadOS 27 that allowed apps to access sensitive user data by implementing additional entitlement checks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86880 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86880.json" } ], "title": "CVE-2026-86880" }, { "cve": "CVE-2026-86920", "notes": [ { "category": "description", "text": "An authorization issue allowing unauthorized app access to sensitive user data was resolved through improved state management across multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86920 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86920.json" } ], "title": "CVE-2026-86920" }, { "cve": "CVE-2026-86925", "notes": [ { "category": "description", "text": "An authorization flaw allowing potential exposure of sensitive user data was resolved by enhancing state management in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86925 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86925.json" } ], "title": "CVE-2026-86925" }, { "cve": "CVE-2026-86942", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing denial-of-service was addressed through enhanced bounds checking in Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27, and related updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86942 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86942.json" } ], "title": "CVE-2026-86942" }, { "cve": "CVE-2026-86950", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in Apple's CoreGraphics affecting iOS, iPadOS, and macOS may allow arbitrary code execution, with known exploitation in targeted attacks on iOS versions prior to iOS 27.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86950 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86950.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-86950" }, { "cve": "CVE-2026-86954", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious images was fixed via improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86954 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86954.json" } ], "title": "CVE-2026-86954" }, { "cve": "CVE-2026-86966", "notes": [ { "category": "description", "text": "A symlink handling vulnerability allowing apps to modify protected file system areas was fixed across multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS in versions 26.7.2, 27, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86966 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86966.json" } ], "title": "CVE-2026-86966" }, { "cve": "CVE-2026-86968", "notes": [ { "category": "description", "text": "An access control vulnerability allowing malicious apps to access restricted system interfaces or manipulate launch attribution was fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86968 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86968.json" } ], "title": "CVE-2026-86968" }, { "cve": "CVE-2026-86969", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability affecting multiple versions of iOS, iPadOS, and macOS was addressed by Apple through enhanced input validation to prevent system crashes and kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86969 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86969.json" } ], "title": "CVE-2026-86969" }, { "cve": "CVE-2026-86970", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems related to processing maliciously crafted fonts was fixed by improving input validation to prevent potential disclosure of process memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86970 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86970.json" } ], "title": "CVE-2026-86970" }, { "cve": "CVE-2026-86971", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing maliciously crafted images was fixed through improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86971 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86971.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-86971" }, { "cve": "CVE-2026-86972", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing potential memory corruption when processing malicious audio files was fixed by improved size validation in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86972 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86972.json" } ], "title": "CVE-2026-86972" }, { "cve": "CVE-2026-86973", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing potential process crashes when processing malicious web content was fixed with improved bounds checking in Safari, iOS, iPadOS, and macOS Golden Gate versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86973 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86973.json" } ], "title": "CVE-2026-86973" }, { "cve": "CVE-2026-86974", "notes": [ { "category": "description", "text": "A type confusion vulnerability causing potential memory corruption when processing malicious web content was fixed in multiple Apple operating systems including Safari, iOS, iPadOS, macOS Golden Gate, and visionOS versions 27.2 and 26.7.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86974 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86974.json" } ], "title": "CVE-2026-86974" }, { "cve": "CVE-2026-86978", "notes": [ { "category": "description", "text": "Apple addressed a vulnerability in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and tvOS 27.2 that previously allowed applications to access sensitive user data by implementing enhanced validation checks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86978 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86978.json" } ], "title": "CVE-2026-86978" }, { "cve": "CVE-2026-86985", "notes": [ { "category": "description", "text": "Apple fixed an issue causing unexpected process crashes from malicious web content by improving input validation across Safari, iOS, iPadOS, macOS Golden Gate, and tvOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86985 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86985.json" } ], "title": "CVE-2026-86985" }, { "cve": "CVE-2026-86986", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari causing crashes when processing malicious web content was fixed through improved memory management across multiple Apple OS versions including Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86986 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86986.json" } ], "title": "CVE-2026-86986" }, { "cve": "CVE-2026-86987", "notes": [ { "category": "description", "text": "An authorization vulnerability in iOS 27.2 and iPadOS 27.2 was resolved by enhancing entitlement checks to prevent remote attackers from accessing sensitive user data.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86987 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86987.json" } ], "title": "CVE-2026-86987" }, { "cve": "CVE-2026-86988", "notes": [ { "category": "description", "text": "A vulnerability allowing process memory disclosure via maliciously crafted images was fixed with improved validation checks in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86988 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86988.json" } ], "title": "CVE-2026-86988" }, { "cve": "CVE-2026-86989", "notes": [ { "category": "description", "text": "An authorization flaw enabling user fingerprinting was resolved by enhanced state management in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86989 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86989.json" } ], "title": "CVE-2026-86989" }, { "cve": "CVE-2026-86990", "notes": [ { "category": "description", "text": "Multiple versions of iOS, iPadOS, macOS, and visionOS addressed an access issue that allowed malicious apps to access the camera without user permission through improved restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86990 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86990.json" } ], "title": "CVE-2026-86990" }, { "cve": "CVE-2026-86991", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability causing unexpected process termination when handling malicious files has been addressed with enhanced bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86991 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86991.json" } ], "title": "CVE-2026-86991" }, { "cve": "CVE-2026-86992", "notes": [ { "category": "description", "text": "Apple addressed an issue causing unexpected app termination when processing maliciously crafted video files by improving memory handling across multiple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27.2, and others.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-86992 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86992.json" } ], "title": "CVE-2026-86992" }, { "cve": "CVE-2026-112413", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking, preventing potential application crashes from maliciously crafted files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112413 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112413.json" } ], "title": "CVE-2026-112413" }, { "cve": "CVE-2026-112414", "notes": [ { "category": "description", "text": "A stack overflow vulnerability causing denial-of-service via malicious message processing was fixed through improved input validation in Apple iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112414 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112414.json" } ], "title": "CVE-2026-112414" }, { "cve": "CVE-2026-112415", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability affecting iOS 26.7.2, iPadOS 26.7.2, and macOS was fixed by enhancing input validation to prevent apps from causing unexpected system termination or memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112415 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112415.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112415" }, { "cve": "CVE-2026-112416", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing malicious video files was fixed by improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112416 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112416.json" } ], "title": "CVE-2026-112416" }, { "cve": "CVE-2026-112423", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhanced bounds checking, preventing potential denial-of-service or memory disclosure from maliciously crafted files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112423 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112423.json" } ], "title": "CVE-2026-112423" }, { "cve": "CVE-2026-112425", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in 3D model processing was addressed by Apple through enhanced bounds checking in iOS, iPadOS, macOS, tvOS, and visionOS updates 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112425 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112425.json" } ], "title": "CVE-2026-112425" }, { "cve": "CVE-2026-112432", "notes": [ { "category": "description", "text": "A logging vulnerability allowing potential access to sensitive user data was addressed through enhanced data redaction in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112432 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112432.json" } ], "title": "CVE-2026-112432" }, { "cve": "CVE-2026-112446", "notes": [ { "category": "description", "text": "An issue allowing apps to potentially access sensitive user data was resolved by implementing additional entitlement checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 27.2 and related releases.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112446 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112446.json" } ], "title": "CVE-2026-112446" }, { "cve": "CVE-2026-112449", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing memory corruption when processing malicious 3D models was fixed via improved input validation in Apple iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112449 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112449.json" } ], "title": "CVE-2026-112449" }, { "cve": "CVE-2026-112454", "notes": [ { "category": "description", "text": "A memory handling flaw causing unexpected app termination or memory corruption when processing maliciously crafted video files was fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112454 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112454.json" } ], "title": "CVE-2026-112454" }, { "cve": "CVE-2026-112455", "notes": [ { "category": "description", "text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112455 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112455.json" } ], "title": "CVE-2026-112455" }, { "cve": "CVE-2026-112456", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing heap corruption was addressed through enhanced input validation in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112456 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112456.json" } ], "title": "CVE-2026-112456" }, { "cve": "CVE-2026-112459", "notes": [ { "category": "description", "text": "A race condition causing potential system termination or kernel memory corruption was resolved by improved state handling in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112459 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112459.json" } ], "title": "CVE-2026-112459" }, { "cve": "CVE-2026-112461", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption in Apple operating systems was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112461 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112461.json" } ], "title": "CVE-2026-112461" }, { "cve": "CVE-2026-112464", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing heap corruption was addressed via improved input validation in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS in versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112464 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112464.json" } ], "title": "CVE-2026-112464" }, { "cve": "CVE-2026-112466", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple OS versions including iOS 26.7.2 and macOS Golden Gate 27.2 was fixed by enhancing input validation to prevent apps from causing unexpected system termination or reading kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112466 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112466.json" } ], "title": "CVE-2026-112466" }, { "cve": "CVE-2026-112468", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential system termination or kernel memory corruption was addressed through improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112468 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112468.json" } ], "title": "CVE-2026-112468" }, { "cve": "CVE-2026-112469", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability was fixed by enhancing bounds checking across multiple Apple operating systems to prevent unexpected system termination or kernel memory corruption caused by malicious applications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112469 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112469.json" } ], "title": "CVE-2026-112469" }, { "cve": "CVE-2026-112470", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed by enhancing bounds checking to prevent unexpected system termination or kernel memory corruption caused by apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112470 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112470.json" } ], "title": "CVE-2026-112470" }, { "cve": "CVE-2026-112474", "notes": [ { "category": "description", "text": "A use-after-free vulnerability allowing potential system termination or kernel memory write has been fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2 through improved memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112474 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112474.json" } ], "title": "CVE-2026-112474" }, { "cve": "CVE-2026-112476", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple Apple operating systems was fixed by implementing improved bounds checking to prevent applications from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112476 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112476.json" } ], "title": "CVE-2026-112476" }, { "cve": "CVE-2026-112477", "notes": [ { "category": "description", "text": "A race condition causing potential system termination or kernel memory corruption was resolved through enhanced locking in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112477 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112477.json" } ], "title": "CVE-2026-112477" }, { "cve": "CVE-2026-112479", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple OS versions was fixed by implementing improved bounds checking to prevent malicious USB devices from causing unexpected system termination or unauthorized kernel memory access.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112479 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112479.json" } ], "title": "CVE-2026-112479" }, { "cve": "CVE-2026-112485", "notes": [ { "category": "description", "text": "Memory corruption caused by processing maliciously crafted 3D models has been addressed with improved memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 27.2 and related updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112485 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112485.json" } ], "title": "CVE-2026-112485" }, { "cve": "CVE-2026-112486", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected application termination when processing 3D models was addressed by enhanced bounds checking in multiple versions of iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112486 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112486.json" } ], "title": "CVE-2026-112486" }, { "cve": "CVE-2026-112488", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, macOS Tahoe, and visionOS versions 26.7.2 and 27.2 has been fixed to prevent process memory corruption from maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112488 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112488.json" } ], "title": "CVE-2026-112488" }, { "cve": "CVE-2026-112491", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination was addressed through improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112491 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112491.json" } ], "title": "CVE-2026-112491" }, { "cve": "CVE-2026-112500", "notes": [ { "category": "description", "text": "A logic flaw in Apple's Hide My Email feature that could expose users' original email addresses was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2 through enhanced restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112500 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112500.json" } ], "title": "CVE-2026-112500" }, { "cve": "CVE-2026-112501", "notes": [ { "category": "description", "text": "A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management in Apple’s iOS, iPadOS, macOS, tvOS, visionOS, and watchOS updates 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112501 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112501.json" } ], "title": "CVE-2026-112501" }, { "cve": "CVE-2026-112507", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in iOS 27.2 and iPadOS 27.2 was addressed by Apple through enhanced bounds checking to prevent system crashes and kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112507 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112507.json" } ], "title": "CVE-2026-112507" }, { "cve": "CVE-2026-112514", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent potential system crashes and kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112514 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112514.json" } ], "title": "CVE-2026-112514" }, { "cve": "CVE-2026-112515", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting multiple Apple operating systems was fixed by improving bounds checking to prevent unexpected system termination or unauthorized kernel memory access.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112515 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112515.json" } ], "title": "CVE-2026-112515" }, { "cve": "CVE-2026-112516", "notes": [ { "category": "description", "text": "A use-after-free vulnerability affecting multiple Apple operating systems was fixed by improving memory management to prevent apps from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112516 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112516.json" } ], "title": "CVE-2026-112516" }, { "cve": "CVE-2026-112517", "notes": [ { "category": "description", "text": "A use after free vulnerability affecting multiple Apple operating systems was fixed through improved memory management to prevent unexpected system termination or kernel memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112517 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112517.json" } ], "title": "CVE-2026-112517" }, { "cve": "CVE-2026-112518", "notes": [ { "category": "description", "text": "A signature validation flaw allowing privileged network attackers to impersonate a Kerberos KDC was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112518 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112518.json" } ], "title": "CVE-2026-112518" }, { "cve": "CVE-2026-112522", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected application termination was addressed through improved bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112522 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112522.json" } ], "title": "CVE-2026-112522" }, { "cve": "CVE-2026-112546", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple OS versions was fixed by enhancing bounds checking to prevent unexpected application termination caused by maliciously crafted files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112546 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112546.json" } ], "title": "CVE-2026-112546" }, { "cve": "CVE-2026-112547", "notes": [ { "category": "description", "text": "A type confusion vulnerability in iOS 27.2 and iPadOS 27.2 has been addressed by implementing enhanced validation checks to prevent unauthorized access to sensitive user data.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112547 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112547.json" } ], "title": "CVE-2026-112547" }, { "cve": "CVE-2026-112554", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability affecting iOS, iPadOS, and macOS was addressed by enhancing bounds checking to prevent system crashes and potential kernel memory exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112554 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112554.json" } ], "title": "CVE-2026-112554" }, { "cve": "CVE-2026-112559", "notes": [ { "category": "description", "text": "Apple fixed an authorization vulnerability affecting multiple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS through improved state management in versions 26.7.2, 27.2, and 15.8.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112559 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112559.json" } ], "title": "CVE-2026-112559" }, { "cve": "CVE-2026-112560", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in image processing was addressed by Apple through enhanced bounds checking across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, preventing potential process memory disclosure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112560 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112560.json" } ], "title": "CVE-2026-112560" }, { "cve": "CVE-2026-112561", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in image processing was fixed by Apple through improved bounds checking across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, preventing potential process memory disclosure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112561 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112561.json" } ], "title": "CVE-2026-112561" }, { "cve": "CVE-2026-112565", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing memory corruption when processing malicious 3D models was fixed via improved input validation in Apple’s iOS, iPadOS, macOS, and visionOS versions 26.7, 27.2, and related updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112565 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112565.json" } ], "title": "CVE-2026-112565" }, { "cve": "CVE-2026-112566", "notes": [ { "category": "description", "text": "A null pointer dereference vulnerability in multiple Apple OS versions was fixed by improved validation to prevent potential denial-of-service attacks by attackers in physical proximity.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112566 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112566.json" } ], "title": "CVE-2026-112566" }, { "cve": "CVE-2026-112567", "notes": [ { "category": "description", "text": "An issue allowing a malicious application to bypass Privacy preferences was resolved through enhanced checks in multiple Apple operating systems including iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112567 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112567.json" } ], "title": "CVE-2026-112567" }, { "cve": "CVE-2026-112571", "notes": [ { "category": "description", "text": "A memory initialization vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed in updates 26.7.2, 27.2, and 15.8.2 to prevent process memory disclosure via maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112571 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112571.json" } ], "title": "CVE-2026-112571" }, { "cve": "CVE-2026-112576", "notes": [ { "category": "description", "text": "A memory integrity vulnerability involving copy-on-write pages was fixed across multiple OS versions, including iOS 16.7.2 and iPadOS 16.7.2, preventing applications from causing unexpected modifications to this memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112576 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112576.json" } ], "title": "CVE-2026-112576" }, { "cve": "CVE-2026-112595", "notes": [ { "category": "description", "text": "An authentication vulnerability in Thread network access was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and tvOS 27.2, preventing attackers in physical proximity from exploiting malicious network traffic.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112595 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112595.json" } ], "title": "CVE-2026-112595" }, { "cve": "CVE-2026-112596", "notes": [ { "category": "description", "text": "An integer overflow vulnerability causing unexpected system termination when processing malicious video files has been fixed with improved bounds checking in multiple Apple operating systems version 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112596 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112596.json" } ], "title": "CVE-2026-112596" }, { "cve": "CVE-2026-112599", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari 27.2 and related OS versions was fixed by improving memory management to prevent unexpected process crashes caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112599 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112599.json" } ], "title": "CVE-2026-112599" }, { "cve": "CVE-2026-112606", "notes": [ { "category": "description", "text": "A type confusion vulnerability causing potential unexpected system termination was resolved by enhancing memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112606 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112606.json" } ], "title": "CVE-2026-112606" }, { "cve": "CVE-2026-112607", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability allowing remote memory leakage was addressed through enhanced bounds checking in iOS 27.2, iPadOS 27.2, and macOS Golden Gate 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112607 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112607.json" } ], "title": "CVE-2026-112607" }, { "cve": "CVE-2026-112609", "notes": [ { "category": "description", "text": "iOS 27.2 and iPadOS 27.2 addressed a security issue that allowed applications to access sensitive user data by implementing enhanced validation checks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112609 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112609.json" } ], "title": "CVE-2026-112609" }, { "cve": "CVE-2026-112610", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption when processing malicious PDF files has been addressed with enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112610 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112610.json" } ], "title": "CVE-2026-112610" }, { "cve": "CVE-2026-112611", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing potential memory corruption when processing malicious PDF files has been addressed with enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112611 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112611.json" } ], "title": "CVE-2026-112611" }, { "cve": "CVE-2026-112612", "notes": [ { "category": "description", "text": "A path handling vulnerability in iOS and iPadOS versions 26.7.2 and 27.2 was fixed by improving validation to prevent attackers with physical access to trust-paired devices from reading and writing arbitrary files.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112612 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112612.json" } ], "title": "CVE-2026-112612" }, { "cve": "CVE-2026-112614", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected app termination when processing malicious images was fixed with improved bounds checking in iOS, iPadOS, and macOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112614 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112614.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112614" }, { "cve": "CVE-2026-112615", "notes": [ { "category": "description", "text": "A use-after-free vulnerability affecting multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112615 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112615.json" } ], "title": "CVE-2026-112615" }, { "cve": "CVE-2026-112616", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2 by enhancing access control mechanisms.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112616 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112616.json" } ], "title": "CVE-2026-112616" }, { "cve": "CVE-2026-112618", "notes": [ { "category": "description", "text": "iOS 27.2, iPadOS 27.2, and visionOS 27.2 address an access control vulnerability that could have allowed applications to access sensitive user data by implementing enhanced access restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112618 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112618.json" } ], "title": "CVE-2026-112618" }, { "cve": "CVE-2026-112619", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in processing malicious calendar invitations was addressed by enhancing bounds checking to prevent memory corruption in multiple Apple operating systems.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112619 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112619.json" } ], "title": "CVE-2026-112619" }, { "cve": "CVE-2026-112620", "notes": [ { "category": "description", "text": "A denial-of-service vulnerability exploitable by attackers in privileged network positions was addressed via improved input validation in Apple’s iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112620 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112620.json" } ], "title": "CVE-2026-112620" }, { "cve": "CVE-2026-112621", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent memory corruption caused by maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112621 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112621.json" } ], "title": "CVE-2026-112621" }, { "cve": "CVE-2026-112622", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in specific iOS, iPadOS, and macOS versions was fixed by improving bounds checking to prevent attackers within radio range from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112622 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112622.json" } ], "title": "CVE-2026-112622" }, { "cve": "CVE-2026-112623", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112623 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112623.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112623" }, { "cve": "CVE-2026-112624", "notes": [ { "category": "description", "text": "An issue allowing apps to bypass Privacy preferences was resolved through enhanced checks in iOS, iPadOS, macOS Golden Gate, Sequoia, Tahoe, and visionOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112624 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112624.json" } ], "title": "CVE-2026-112624" }, { "cve": "CVE-2026-112625", "notes": [ { "category": "description", "text": "An integer underflow vulnerability causing potential memory corruption when processing malicious images was addressed via improved input validation in multiple versions of iOS, iPadOS, and macOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112625 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112625.json" } ], "title": "CVE-2026-112625" }, { "cve": "CVE-2026-112626", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by improving memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112626 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112626.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112626" }, { "cve": "CVE-2026-112627", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in image processing was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS to prevent potential process memory disclosure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112627 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112627.json" } ], "title": "CVE-2026-112627" }, { "cve": "CVE-2026-112628", "notes": [ { "category": "description", "text": "Multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS received updates addressing an issue that allowed apps to access sensitive user data through enhanced data access restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112628 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112628.json" } ], "title": "CVE-2026-112628" }, { "cve": "CVE-2026-112629", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious images was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112629 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112629.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112629" }, { "cve": "CVE-2026-112630", "notes": [ { "category": "description", "text": "An uninitialized memory vulnerability in image processing was addressed in multiple versions of iOS, iPadOS, and macOS, potentially allowing disclosure of process memory when handling maliciously crafted images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112630 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112630.json" } ], "title": "CVE-2026-112630" }, { "cve": "CVE-2026-112632", "notes": [ { "category": "description", "text": "An uninitialized memory vulnerability in image processing was addressed in multiple Apple operating systems, including iOS, iPadOS, macOS, and visionOS, preventing potential disclosure of process memory when handling malicious images.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112632 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112632.json" } ], "title": "CVE-2026-112632" }, { "cve": "CVE-2026-112633", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability in image processing was addressed through enhanced bounds checking in multiple versions of iOS, iPadOS, and macOS, preventing unexpected application termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112633 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112633.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112633" }, { "cve": "CVE-2026-112634", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "other", "text": "Out-of-bounds Read", "title": "CWE-125" }, { "category": "description", "text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious images was addressed through enhanced bounds checking in iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112634 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112634.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112634" }, { "cve": "CVE-2026-112637", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in Safari 27.2 and related Apple operating systems was fixed to prevent arbitrary code execution triggered by processing malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112637 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112637.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112637" }, { "cve": "CVE-2026-112638", "notes": [ { "category": "description", "text": "A heap buffer overflow vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking, preventing attackers within radio range from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112638 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112638.json" } ], "title": "CVE-2026-112638" }, { "cve": "CVE-2026-112639", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was addressed through improved memory management, preventing arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112639 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112639.json" } ], "title": "CVE-2026-112639" }, { "cve": "CVE-2026-112640", "notes": [ { "category": "description", "text": "A use-after-free vulnerability affecting multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent memory corruption from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112640 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112640.json" } ], "title": "CVE-2026-112640" }, { "cve": "CVE-2026-112642", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was fixed by improving bounds checking to prevent process memory disclosure via maliciously crafted fonts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112642 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112642.json" } ], "title": "CVE-2026-112642" }, { "cve": "CVE-2026-112646", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "other", "text": "Out-of-bounds Write", "title": "CWE-787" }, { "category": "description", "text": "An out-of-bounds write vulnerability causing potential system termination or memory corruption was addressed through enhanced bounds checking in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112646 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112646.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112646" }, { "cve": "CVE-2026-112651", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems including Safari, iOS, iPadOS, macOS Golden Gate, and visionOS was fixed by improved memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112651 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112651.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112651" }, { "cve": "CVE-2026-112652", "notes": [ { "category": "description", "text": "A logic flaw in state management allowing malicious apps to bypass certificate validation was resolved across multiple Apple OS versions including iOS, iPadOS, macOS Golden Gate, Sequoia, Tahoe, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112652 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112652.json" } ], "title": "CVE-2026-112652" }, { "cve": "CVE-2026-112653", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential process termination when processing malicious web content was fixed through improved memory management in multiple Apple OS versions including Safari, iOS, iPadOS, macOS Golden Gate, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112653 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112653.json" } ], "title": "CVE-2026-112653" }, { "cve": "CVE-2026-112654", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112654 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112654.json" } ], "title": "CVE-2026-112654" }, { "cve": "CVE-2026-112655", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "other", "text": "Use After Free", "title": "CWE-416" }, { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by improving memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112655 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112655.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112655" }, { "cve": "CVE-2026-112656", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was fixed by enhancing bounds checking to prevent potential disclosure of process memory from maliciously crafted fonts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112656 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112656.json" } ], "title": "CVE-2026-112656" }, { "cve": "CVE-2026-112658", "notes": [ { "category": "description", "text": "An input validation vulnerability in iOS 27.2, iPadOS 27.2, and macOS Golden Gate 27.2 was addressed to prevent apps from potentially accessing sensitive user data.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112658 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112658.json" } ], "title": "CVE-2026-112658" }, { "cve": "CVE-2026-112659", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "other", "text": "Access of Resource Using Incompatible Type ('Type Confusion')", "title": "CWE-843" }, { "category": "description", "text": "A type confusion vulnerability in multiple Apple operating systems was fixed by enhancing memory handling to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112659 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112659.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112659" }, { "cve": "CVE-2026-112660", "notes": [ { "category": "description", "text": "An authorization flaw allowing applications to bypass Privacy preferences was resolved via enhanced state management across multiple Apple OS versions including iOS, iPadOS, macOS, and visionOS updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112660 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112660.json" } ], "title": "CVE-2026-112660" }, { "cve": "CVE-2026-112665", "notes": [ { "category": "description", "text": "An information disclosure vulnerability allowing apps to determine kernel memory layout was resolved through improved state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112665 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112665.json" } ], "title": "CVE-2026-112665" }, { "cve": "CVE-2026-112666", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems was fixed by improving memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112666 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112666.json" } ], "title": "CVE-2026-112666" }, { "cve": "CVE-2026-112669", "notes": [ { "category": "description", "text": "A race condition vulnerability in Safari 27.2 and related OS versions was fixed by improving state handling to prevent unexpected crashes triggered by maliciously crafted web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112669 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112669.json" } ], "title": "CVE-2026-112669" }, { "cve": "CVE-2026-112671", "notes": [ { "category": "description", "text": "A resource exhaustion vulnerability in Apple operating systems including iOS 15.8.2, iPadOS 26.7.2, macOS 27.2, and visionOS 27.2 was addressed through enhanced input validation to prevent denial-of-service attacks.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112671 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112671.json" } ], "title": "CVE-2026-112671" }, { "cve": "CVE-2026-112673", "notes": [ { "category": "description", "text": "A type confusion vulnerability in multiple Apple operating systems was addressed by enhancing state handling to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112673 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112673.json" } ], "title": "CVE-2026-112673" }, { "cve": "CVE-2026-112676", "notes": [ { "category": "description", "text": "An entitlement check vulnerability allowing potential unauthorized access to the Photos Library was addressed in multiple Apple OS versions including iOS, iPadOS, macOS, and visionOS updates.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112676 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112676.json" } ], "title": "CVE-2026-112676" }, { "cve": "CVE-2026-112678", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing unauthorized app access to sensitive user data was resolved with enhanced restrictions across multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112678 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112678.json" } ], "title": "CVE-2026-112678" }, { "cve": "CVE-2026-112679", "notes": [ { "category": "description", "text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption was fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2 via improved memory management.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112679 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112679.json" } ], "title": "CVE-2026-112679" }, { "cve": "CVE-2026-112680", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent potential disclosure of process memory from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112680 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112680.json" } ], "title": "CVE-2026-112680" }, { "cve": "CVE-2026-112681", "notes": [ { "category": "description", "text": "Apple addressed a potential user fingerprinting issue through enhanced entitlement checks in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112681 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112681.json" } ], "title": "CVE-2026-112681" }, { "cve": "CVE-2026-112682", "notes": [ { "category": "description", "text": "An input validation vulnerability allowing remote attackers to cause unexpected app termination was fixed by Apple in iOS, iPadOS, macOS, visionOS, and watchOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112682 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112682.json" } ], "title": "CVE-2026-112682" }, { "cve": "CVE-2026-112683", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in font processing was addressed through enhanced bounds checking in Apple operating systems including iOS, iPadOS, macOS, and visionOS, preventing potential app crashes or memory corruption.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112683 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112683.json" } ], "title": "CVE-2026-112683" }, { "cve": "CVE-2026-112684", "notes": [ { "category": "description", "text": "An issue causing unexpected process crashes from processing maliciously crafted web content was resolved through improved state management across multiple Apple operating systems and Safari versions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112684 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112684.json" } ], "title": "CVE-2026-112684" }, { "cve": "CVE-2026-112685", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved via enhanced state management in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112685 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112685.json" } ], "title": "CVE-2026-112685" }, { "cve": "CVE-2026-112686", "notes": [ { "category": "description", "text": "A race condition vulnerability in multiple Apple operating systems and Safari was fixed by improving locking mechanisms to prevent unexpected process termination caused by maliciously crafted web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112686 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112686.json" } ], "title": "CVE-2026-112686" }, { "cve": "CVE-2026-112687", "notes": [ { "category": "description", "text": "A local network vulnerability causing unexpected system termination or memory corruption was resolved by removing the vulnerable code in iOS 27.2, iPadOS 27.2, and tvOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112687 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112687.json" } ], "title": "CVE-2026-112687" }, { "cve": "CVE-2026-112688", "notes": [ { "category": "description", "text": "A memory corruption vulnerability affecting iOS, iPadOS, and macOS that could lead to unexpected app termination or arbitrary code execution has been addressed through improved memory handling.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112688 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112688.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-112688" }, { "cve": "CVE-2026-112689", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability affecting multiple OS versions was fixed by enhancing input validation to prevent unexpected system termination or kernel memory corruption caused by applications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112689 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112689.json" } ], "title": "CVE-2026-112689" }, { "cve": "CVE-2026-112690", "notes": [ { "category": "description", "text": "An input validation vulnerability in the WebContent sandbox was fixed across multiple Apple operating systems, including iOS, iPadOS, macOS, and visionOS, preventing remote attackers from escaping sandbox restrictions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112690 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112690.json" } ], "title": "CVE-2026-112690" }, { "cve": "CVE-2026-112691", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability causing unexpected system termination was addressed via improved input validation in Apple’s iOS, iPadOS, visionOS, and watchOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112691 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112691.json" } ], "title": "CVE-2026-112691" }, { "cve": "CVE-2026-112692", "notes": [ { "category": "description", "text": "An issue allowing unauthorized app access to sensitive user data was resolved through additional entitlement checks in iOS 27.2, iPadOS 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112692 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112692.json" } ], "title": "CVE-2026-112692" }, { "cve": "CVE-2026-112693", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari was addressed by enhancing memory management across multiple OS versions to prevent crashes triggered by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112693 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112693.json" } ], "title": "CVE-2026-112693" }, { "cve": "CVE-2026-112695", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process termination caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112695 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112695.json" } ], "title": "CVE-2026-112695" }, { "cve": "CVE-2026-112696", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability was addressed by enhancing bounds checking across multiple OS versions, including iOS 27.2 and macOS updates, preventing unexpected system termination or kernel memory corruption caused by apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112696 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112696.json" } ], "title": "CVE-2026-112696" }, { "cve": "CVE-2026-112697", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by improving memory management to prevent arbitrary code execution from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112697 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112697.json" } ], "title": "CVE-2026-112697" }, { "cve": "CVE-2026-112698", "notes": [ { "category": "description", "text": "A memory handling vulnerability in multiple versions of iOS, iPadOS, and macOS was addressed to prevent apps from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112698 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112698.json" } ], "title": "CVE-2026-112698" }, { "cve": "CVE-2026-112699", "notes": [ { "category": "description", "text": "An out-of-bounds read vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking to prevent potential disclosure of process memory from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112699 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112699.json" } ], "title": "CVE-2026-112699" }, { "cve": "CVE-2026-112701", "notes": [ { "category": "description", "text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved by enhanced state management in iOS and iPadOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112701 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112701.json" } ], "title": "CVE-2026-112701" }, { "cve": "CVE-2026-112705", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability was addressed through enhanced bounds checking across multiple operating system versions to prevent applications from causing unexpected system termination.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112705 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112705.json" } ], "title": "CVE-2026-112705" }, { "cve": "CVE-2026-112706", "notes": [ { "category": "description", "text": "A permissions vulnerability allowing unauthorized app access to sensitive user data was resolved with enhanced restrictions in multiple Apple operating systems including iOS, iPadOS, tvOS, visionOS, and watchOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112706 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112706.json" } ], "title": "CVE-2026-112706" }, { "cve": "CVE-2026-112707", "notes": [ { "category": "description", "text": "A privacy vulnerability in iOS and iPadOS versions 26.7.2 and 27.2 was addressed by Apple through relocating sensitive data to a protected location, preventing apps from identifying other installed apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-112707 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-112707.json" } ], "title": "CVE-2026-112707" }, { "cve": "CVE-2026-113896", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113896 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113896.json" } ], "title": "CVE-2026-113896" }, { "cve": "CVE-2026-113897", "notes": [ { "category": "description", "text": "A remote code execution vulnerability allowing sandbox escape in Web Content was fixed by removing the vulnerable code in Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113897 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113897.json" } ], "title": "CVE-2026-113897" }, { "cve": "CVE-2026-113898", "notes": [ { "category": "description", "text": "A logging issue was fixed by enhancing data redaction across multiple OS versions to prevent malicious applications from bypassing Privacy preferences.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113898 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113898.json" } ], "title": "CVE-2026-113898" }, { "cve": "CVE-2026-113901", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari 27.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2 was fixed by enhancing memory management to prevent unexpected process crashes triggered by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113901 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113901.json" } ], "title": "CVE-2026-113901" }, { "cve": "CVE-2026-113903", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in Safari, iOS, iPadOS, macOS Golden Gate, and visionOS 27.2 was fixed by enhancing memory management to prevent malicious web content from causing unexpected memory modifications.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113903 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113903.json" } ], "title": "CVE-2026-113903" }, { "cve": "CVE-2026-113904", "notes": [ { "category": "description", "text": "A use-after-free vulnerability in multiple Apple operating systems and Safari was fixed by enhancing memory management to prevent unexpected process crashes caused by malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113904 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113904.json" } ], "title": "CVE-2026-113904" }, { "cve": "CVE-2026-113906", "notes": [ { "category": "description", "text": "A null pointer dereference vulnerability in iOS and iPadOS versions 26.7.2 and 27.2 was addressed by improved validation to prevent denial-of-service attacks from nearby attackers.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113906 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113906.json" } ], "title": "CVE-2026-113906" }, { "cve": "CVE-2026-113907", "notes": [ { "category": "description", "text": "A buffer overflow vulnerability affecting multiple Apple operating systems was fixed by enhancing memory handling to prevent unexpected system termination or memory corruption caused by apps.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113907 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113907.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-113907" }, { "cve": "CVE-2026-113908", "notes": [ { "category": "description", "text": "iOS 27.2 and iPadOS 27.2 addressed a privacy vulnerability by removing access to sensitive user data from apps, thereby preventing unauthorized data exposure.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113908 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113908.json" } ], "title": "CVE-2026-113908" }, { "cve": "CVE-2026-113909", "notes": [ { "category": "description", "text": "A memory corruption vulnerability allowing physical proximity attackers to corrupt process memory was fixed via improved input validation in multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, and visionOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113909 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113909.json" } ], "title": "CVE-2026-113909" }, { "cve": "CVE-2026-113910", "notes": [ { "category": "description", "text": "A memory initialization issue affecting multiple OS versions was fixed to enhance memory handling and prevent applications from potentially disclosing kernel memory.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113910 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113910.json" } ], "title": "CVE-2026-113910" }, { "cve": "CVE-2026-113912", "notes": [ { "category": "description", "text": "An out-of-bounds access vulnerability was fixed by enhancing bounds checking to prevent application crashes or memory corruption caused by malicious media files across multiple operating system versions.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113912 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113912.json" } ], "title": "CVE-2026-113912" }, { "cve": "CVE-2026-113913", "notes": [ { "category": "description", "text": "An input validation vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS was fixed to prevent potential disclosure of sensitive information.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113913 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113913.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1", "CSAFPID-2" ] } ], "title": "CVE-2026-113913" }, { "cve": "CVE-2026-113914", "notes": [ { "category": "description", "text": "An authorization vulnerability allowing unauthorized access to sensitive user data was resolved through improved state management in iOS and iPadOS versions 26.7.2 and 27.2.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113914 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113914.json" } ], "title": "CVE-2026-113914" }, { "cve": "CVE-2026-113915", "notes": [ { "category": "description", "text": "A race condition vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113915 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113915.json" } ], "title": "CVE-2026-113915" }, { "cve": "CVE-2026-113949", "notes": [ { "category": "description", "text": "A type confusion vulnerability in multiple Apple operating systems was fixed by enhancing state management to prevent potential memory corruption from malicious web content.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113949 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113949.json" } ], "title": "CVE-2026-113949" }, { "cve": "CVE-2026-113950", "notes": [ { "category": "description", "text": "An out-of-bounds write vulnerability in font processing was fixed by enhancing bounds checking across multiple Apple operating systems to prevent app crashes and memory corruption caused by malicious fonts.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113950 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113950.json" } ], "title": "CVE-2026-113950" }, { "cve": "CVE-2026-113952", "notes": [ { "category": "description", "text": "A logic issue was fixed in Safari 27.2, iOS 26.7.2/27.2, iPadOS 26.7.2/27.2, and macOS Golden Gate 27.2 to improve checks preventing websites from using media formats restricted in Lockdown Mode.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-1", "CSAFPID-2" ] }, "references": [ { "category": "self", "summary": "CVE-2026-113952 | NCSC-NL Website", "url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-113952.json" } ], "title": "CVE-2026-113952" } ] }