Apple

iOS 26.7.2 and iPadOS 26.7.2

149227 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149227. 134 CVE entries, 7 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149227

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

254 lines

Showing 1–50 of 254 , page 1 of 6

CVE-2026-84493 BR2026-0000-033601 AccessorySetupKit unclaimed

A malicious app may be able to access Bluetooth without user consent

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-113898 BR2026-0000-033602 Accounts unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as Bhaswanth Chigurupati

CVE-2026-112612 BR2026-0000-033603 Accounts unclaimed

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files

Credited as Johnny Franks (@0xjohnny)

CVE-2026-112612 BR2026-0000-033604 Accounts unclaimed

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files

Credited as Daniel

CVE-2026-112612 BR2026-0000-033605 Accounts unclaimed

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files

Credited as KennethLi

CVE-2026-113914 BR2026-0000-033606 App Store unclaimed

An app may be able to access sensitive user data

Credited as Jaebin Sim (simjabin@gmail.com)

CVE-2026-112690 BR2026-0000-033607 App Store unclaimed

A remote attacker may be able to break out of the WebContent sandbox

Credited as Claudio Bozzato

CVE-2026-112690 BR2026-0000-033608 App Store unclaimed

A remote attacker may be able to break out of the WebContent sandbox

Credited as Francesco Benvenuto of Cisco Talos

CVE-2026-86920 BR2026-0000-033609 Apple Intelligence unclaimed

An app may be able to access sensitive user data

Credited as Johan Wahyudi

CVE-2026-112416 BR2026-0000-033610 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112416 BR2026-0000-033611 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Narendra Singh (@_3P1C)

CVE-2026-112416 BR2026-0000-033612 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Hcamael

CVE-2026-112416 BR2026-0000-033613 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112416 BR2026-0000-033614 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Dohyeon An @PILAB Technology, Inc

CVE-2026-112415 BR2026-0000-033615 AppleAVD unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as Rahul Raj

CVE-2026-112415 BR2026-0000-033616 AppleAVD unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as Hcamael

CVE-2026-112415 BR2026-0000-033617 AppleAVD unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112546 BR2026-0000-033618 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as lunar815

CVE-2026-112546 BR2026-0000-033619 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Nathaniel Oh (@calysteon)

CVE-2026-112546 BR2026-0000-033620 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Piotr Jerzy Duszynski

CVE-2026-112546 BR2026-0000-033621 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Surej Sekhar

CVE-2026-112546 BR2026-0000-033622 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as r3pwnx (@r3pwnx)

CVE-2026-112546 BR2026-0000-033623 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Lily Cohl (@GenericCoding)

CVE-2026-112705 BR2026-0000-033624 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Marco Schmitt

CVE-2026-112705 BR2026-0000-033625 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Andrey Chernykh

CVE-2026-112705 BR2026-0000-033626 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Josh Maine of Calif.io

CVE-2026-112689 BR2026-0000-033627 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Franco Belman at Blackwing Intelligence

CVE-2026-112470 BR2026-0000-033628 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Hcamael

CVE-2026-112470 BR2026-0000-033629 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112468 BR2026-0000-033630 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Hcamael

CVE-2026-112468 BR2026-0000-033631 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112469 BR2026-0000-033632 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Hcamael

CVE-2026-112469 BR2026-0000-033633 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112466 BR2026-0000-033634 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or read kernel memory

Credited as Hcamael

CVE-2026-112466 BR2026-0000-033635 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or read kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112566 BR2026-0000-033636 Bluetooth unclaimed

An attacker in physical proximity may be able to cause a denial-of-service

Credited as Chris Bailey - Short Circuit

CVE-2026-113906 BR2026-0000-033637 Bluetooth unclaimed

An attacker in physical proximity may be able to cause a denial-of-service

Credited as Chris Bailey - Short Circuit

CVE-2026-112678 BR2026-0000-033638 Calendar unclaimed

An app may be able to access sensitive user data

Credited as Neon

CVE-2026-112678 BR2026-0000-033639 Calendar unclaimed

An app may be able to access sensitive user data

Credited as Niels Hofmans

CVE-2026-112678 BR2026-0000-033640 Calendar unclaimed

An app may be able to access sensitive user data

Credited as Mustafa Calap (@ordinal0, dbg.re)

CVE-2026-112701 BR2026-0000-033641 CloudKit unclaimed

An app may be able to access sensitive user data

Credited as N.M.Praveen Nawarathne (@zblockrat)

CVE-2026-113910 BR2026-0000-033642 Compression unclaimed

An app may be able to disclose kernel memory

Credited as Tucker Willenborg

CVE-2026-86966 BR2026-0000-033643 copyfile unclaimed

An app may be able to modify protected parts of the file system

Credited as Jihwan Yoon

CVE-2026-86969 BR2026-0000-033644 CoreAudio unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-113907 BR2026-0000-033645 CoreAudio unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112638 BR2026-0000-033646 CoreAudio unclaimed

An attacker in radio range may be able to cause unexpected system termination

Credited as Altin Gashi

CVE-2026-112638 BR2026-0000-033647 CoreAudio unclaimed

An attacker in radio range may be able to cause unexpected system termination

Credited as Përparim Mjeku

CVE-2026-86972 BR2026-0000-033648 CoreAudio unclaimed

Processing a maliciously crafted audio file may lead to memory corruption

Credited as Meta Product Security

CVE-2026-112610 BR2026-0000-033649 CoreGraphics unclaimed

Processing a maliciously crafted PDF file may lead to memory corruption

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112611 BR2026-0000-033650 CoreGraphics unclaimed

Processing a maliciously crafted PDF file may lead to memory corruption

Credited as f4&Zhiniang Peng with HUST