Apple
iOS 27.2 and iPadOS 27.2
149230 Oct 26, 2026 Source: Vendor
Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://support.apple.com/en-us/149230
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
339 lines
Showing 51–100 of 339 matching , page 2 of 7 , clear filters
CVE-2026-86988
BR2026-0000-033312
ColorSync
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-86988
BR2026-0000-033313
ColorSync
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-113910
BR2026-0000-033314
Compression
unclaimed
An app may be able to disclose kernel memory
Credited as Tucker Willenborg
CVE-2026-113908
BR2026-0000-033315
Contacts
unclaimed
An app may be able to access sensitive user data
Credited as Stuart Wallace
CVE-2026-113912
BR2026-0000-033316
CoreAudio
unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-113912
BR2026-0000-033317
CoreAudio
unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as Roman Zabicki
CVE-2026-113912
BR2026-0000-033318
CoreAudio
unclaimed
Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory
Credited as Anna Groza (@pwnlambda) of Calif.io
CVE-2026-113907
BR2026-0000-033319
CoreAudio
unclaimed
An app may be able to cause unexpected system termination or corrupt process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-86972
BR2026-0000-033320
CoreAudio
unclaimed
Processing a maliciously crafted audio file may lead to memory corruption
Credited as Meta Product Security
CVE-2026-86969
BR2026-0000-033321
CoreAudio
unclaimed
An app may be able to cause unexpected system termination or corrupt kernel memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112638
BR2026-0000-033322
CoreAudio
unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Përparim Mjeku
CVE-2026-112638
BR2026-0000-033323
CoreAudio
unclaimed
An attacker in radio range may be able to cause unexpected system termination
Credited as Altin Gashi
CVE-2026-112611
BR2026-0000-033324
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as f4&Zhiniang Peng with HUST
CVE-2026-112611
BR2026-0000-033325
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Aobo Wang (@M4x_1997)
CVE-2026-112611
BR2026-0000-033326
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Xiang Chen
CVE-2026-112611
BR2026-0000-033327
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Jakob Pammer
CVE-2026-112611
BR2026-0000-033328
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Anna Groza (@pwnlambda) of Calif.io
CVE-2026-112611
BR2026-0000-033329
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Piotr Jerzy Duszynski
CVE-2026-112610
BR2026-0000-033330
CoreGraphics
unclaimed
Processing a maliciously crafted PDF file may lead to memory corruption
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-113950
BR2026-0000-033331
CoreGraphics
unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Substrate
CVE-2026-113950
BR2026-0000-033332
CoreGraphics
unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Stefan Esser (Calif)
CVE-2026-86992
BR2026-0000-033333
CoreMedia
unclaimed
Processing a maliciously crafted video file may lead to unexpected app termination
Credited as Niels Hofmans
CVE-2026-112706
BR2026-0000-033334
CoreMedia
unclaimed
An app may be able to access sensitive user data
Credited as Adriatik Raci
CVE-2026-112706
BR2026-0000-033335
CoreMedia
unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-112706
BR2026-0000-033336
CoreMedia
unclaimed
An app may be able to access sensitive user data
Credited as Chris Bailey - Short Circuit
CVE-2026-112688
BR2026-0000-033337
CoreMedia
unclaimed
Parsing a file may lead to an unexpected app termination or arbitrary code execution
Credited as 정우 하 (@0xfa11babe)
CVE-2026-112688
BR2026-0000-033338
CoreMedia
unclaimed
Parsing a file may lead to an unexpected app termination or arbitrary code execution
Credited as Chris Bailey - Short Circuit
CVE-2026-86990
BR2026-0000-033339
CoreMedia
unclaimed
A malicious app may be able to access the camera without user permission
Credited as Mustafa Calap (@ordinal0, dbg.re)
CVE-2026-112656
BR2026-0000-033340
CoreText
unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Nurihan Kim (HanTul) working with TrendAI Zero Day Initiative
CVE-2026-113896
BR2026-0000-033341
FileProvider
unclaimed
An app may be able to access sensitive user data
Credited as R4mbb
CVE-2026-113896
BR2026-0000-033342
FileProvider
unclaimed
An app may be able to access sensitive user data
Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova
CVE-2026-112618
BR2026-0000-033343
Files
unclaimed
An app may be able to access sensitive user data
Credited as Somair Ansar
CVE-2026-112618
BR2026-0000-033344
Files
unclaimed
An app may be able to access sensitive user data
Credited as Abodi Dawoud
CVE-2026-86970
BR2026-0000-033345
FontParser
unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Hcamael
CVE-2026-86970
BR2026-0000-033346
FontParser
unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112683
BR2026-0000-033347
FontParser
unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as Hcamael
CVE-2026-112683
BR2026-0000-033348
FontParser
unclaimed
Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory
Credited as 章鱼哥@aipy (aipyaipy.com)
CVE-2026-112642
BR2026-0000-033349
FontParser
unclaimed
Processing a maliciously crafted font may result in the disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112432
BR2026-0000-033350
FontParser
unclaimed
An app may be able to access sensitive user data
Credited as D4rthL
CVE-2026-112518
BR2026-0000-033351
Heimdal
unclaimed
An attacker in a privileged network position may be able to impersonate a Kerberos KDC
Credited as Roman Zabicki
CVE-2026-112518
BR2026-0000-033352
Heimdal
unclaimed
An attacker in a privileged network position may be able to impersonate a Kerberos KDC
Credited as Tristan Madani (@TristanInSec) from Talence Security
CVE-2026-112456
BR2026-0000-033353
HFS
unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Jihwan Yoon
CVE-2026-112456
BR2026-0000-033354
HFS
unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Yash Pandya
CVE-2026-112456
BR2026-0000-033355
HFS
unclaimed
Processing a maliciously crafted file may lead to heap corruption
Credited as Parth Raval
CVE-2026-86978
BR2026-0000-033356
HomeKit
unclaimed
An app may be able to access sensitive user data
Credited as Garin R
CVE-2026-112596
BR2026-0000-033357
HomeKit
unclaimed
Processing a maliciously crafted video file may lead to unexpected system termination
Credited as Garin R
CVE-2026-112571
BR2026-0000-033358
ImageIO
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as sh3rlock (김보겸)
CVE-2026-112561
BR2026-0000-033359
ImageIO
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Meta Red Team X - Nik Tsytsarkin
CVE-2026-112627
BR2026-0000-033360
ImageIO
unclaimed
Processing a maliciously crafted image may result in disclosure of process memory
Credited as Mateusz Jurczyk of Google Project Zero
CVE-2026-112488
BR2026-0000-033361
ImageIO
unclaimed
Processing a maliciously crafted image may corrupt process memory
Credited as Mateusz Jurczyk of Google Project Zero