Apple

iOS 27.2 and iPadOS 27.2

149230 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149230

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

339 lines

Showing 1–50 of 339 , page 1 of 7

CVE-2026-84493 BR2026-0000-033262 AccessorySetupKit unclaimed

A malicious app may be able to access Bluetooth without user consent

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-113898 BR2026-0000-033263 Accounts unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as Bhaswanth Chigurupati

CVE-2026-112446 BR2026-0000-033264 Accounts unclaimed

An app may be able to access sensitive user data

Credited as LiangWei

CVE-2026-112446 BR2026-0000-033265 Accounts unclaimed

An app may be able to access sensitive user data

Credited as Sindre Sorhus

CVE-2026-112612 BR2026-0000-033266 Accounts unclaimed

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files

Credited as Johnny Franks (@0xjohnny)

CVE-2026-112612 BR2026-0000-033267 Accounts unclaimed

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files

Credited as Daniel

CVE-2026-112612 BR2026-0000-033268 Accounts unclaimed

An attacker with physical access to a trust-paired device may be able to read and write arbitrary files

Credited as KennethLi

CVE-2026-112692 BR2026-0000-033269 App Intents unclaimed

An app may be able to access sensitive user data

Credited as Huy Nguyen (@34306) of Calif.io

CVE-2026-113914 BR2026-0000-033270 App Store unclaimed

An app may be able to access sensitive user data

Credited as Jaebin Sim (simjabin@gmail.com)

CVE-2026-112690 BR2026-0000-033271 App Store unclaimed

A remote attacker may be able to break out of the WebContent sandbox

Credited as Claudio Bozzato

CVE-2026-112690 BR2026-0000-033272 App Store unclaimed

A remote attacker may be able to break out of the WebContent sandbox

Credited as Francesco Benvenuto of Cisco Talos

CVE-2026-86987 BR2026-0000-033273 Apple Intelligence unclaimed

A remote attacker may be able to access sensitive user data

Credited as Richard Hyunho Im (@richeeta) at Route Zero Security

CVE-2026-112696 BR2026-0000-033274 Apple Neural Engine unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Jaeyeong Lee

CVE-2026-84494 BR2026-0000-033275 Apple Neural Engine unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112416 BR2026-0000-033276 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Dohyeon An @PILAB Technology, Inc

CVE-2026-112416 BR2026-0000-033277 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Hcamael

CVE-2026-112416 BR2026-0000-033278 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112416 BR2026-0000-033279 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Narendra Singh (@_3P1C)

CVE-2026-112416 BR2026-0000-033280 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112415 BR2026-0000-033281 AppleAVD unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as Hcamael

CVE-2026-112415 BR2026-0000-033282 AppleAVD unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112415 BR2026-0000-033283 AppleAVD unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as Rahul Raj

CVE-2026-112454 BR2026-0000-033284 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory

Credited as @Licht_jb

CVE-2026-112454 BR2026-0000-033285 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory

Credited as Hcamael

CVE-2026-112454 BR2026-0000-033286 AppleAVD unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112546 BR2026-0000-033287 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as lunar815

CVE-2026-112546 BR2026-0000-033288 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Surej Sekhar

CVE-2026-112546 BR2026-0000-033289 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Piotr Jerzy Duszynski

CVE-2026-112546 BR2026-0000-033290 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as r3pwnx (@r3pwnx)

CVE-2026-112546 BR2026-0000-033291 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Lily Cohl (@GenericCoding)

CVE-2026-112546 BR2026-0000-033292 Audio unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Nathaniel Oh (@calysteon)

CVE-2026-112705 BR2026-0000-033293 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Marco Schmitt

CVE-2026-112705 BR2026-0000-033294 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Andrey Chernykh

CVE-2026-112705 BR2026-0000-033295 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Josh Maine of Calif.io

CVE-2026-112689 BR2026-0000-033296 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Franco Belman at Blackwing Intelligence

CVE-2026-112470 BR2026-0000-033297 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Hcamael

CVE-2026-112470 BR2026-0000-033298 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112469 BR2026-0000-033299 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Hcamael

CVE-2026-112469 BR2026-0000-033300 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112468 BR2026-0000-033301 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Hcamael

CVE-2026-112468 BR2026-0000-033302 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112466 BR2026-0000-033303 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or read kernel memory

Credited as Hcamael

CVE-2026-112466 BR2026-0000-033304 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination or read kernel memory

Credited as 章鱼哥@aipy (aipyaipy.com)

CVE-2026-112566 BR2026-0000-033305 Bluetooth unclaimed

An attacker in physical proximity may be able to cause a denial-of-service

Credited as Chris Bailey - Short Circuit

CVE-2026-113906 BR2026-0000-033306 Bluetooth unclaimed

An attacker in physical proximity may be able to cause a denial-of-service

Credited as Chris Bailey - Short Circuit

CVE-2026-112678 BR2026-0000-033307 Calendar unclaimed

An app may be able to access sensitive user data

Credited as Neon

CVE-2026-112678 BR2026-0000-033308 Calendar unclaimed

An app may be able to access sensitive user data

Credited as Niels Hofmans

CVE-2026-112678 BR2026-0000-033309 Calendar unclaimed

An app may be able to access sensitive user data

Credited as Mustafa Calap (@ordinal0, dbg.re)

CVE-2026-112619 BR2026-0000-033310 Calendar unclaimed

Processing a maliciously crafted calendar invitation may lead to memory corruption

Credited as Ivan Fratric of Google Project Zero

CVE-2026-112701 BR2026-0000-033311 CloudKit unclaimed

An app may be able to access sensitive user data

Credited as N.M.Praveen Nawarathne (@zblockrat)