Apple

iOS 27.2 and iPadOS 27.2

149230 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149230

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

339 lines

Showing 101–150 of 339 , page 3 of 7

CVE-2026-112488 BR2026-0000-033362 ImageIO unclaimed

Processing a maliciously crafted image may corrupt process memory

Credited as Nik Tsytsarkin

CVE-2026-112634 BR2026-0000-033363 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112629 BR2026-0000-033364 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112633 BR2026-0000-033365 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112614 BR2026-0000-033366 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as PETOWORKS의 Bugeun Choi (@Bugeun)

CVE-2026-112614 BR2026-0000-033367 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as Rahul Raj

CVE-2026-112614 BR2026-0000-033368 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as Piotr Jerzy Duszynski

CVE-2026-112614 BR2026-0000-033369 ImageIO unclaimed

Processing a maliciously crafted image may lead to unexpected app termination

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112632 BR2026-0000-033370 ImageIO unclaimed

Processing a maliciously crafted image may result in disclosure of process memory

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112630 BR2026-0000-033371 ImageIO unclaimed

Processing a maliciously crafted image may result in disclosure of process memory

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112625 BR2026-0000-033372 ImageIO unclaimed

Processing a maliciously crafted image may result in memory corruption

Credited as Mateusz Jurczyk of Google Project Zero

CVE-2026-112515 BR2026-0000-033373 IOHIDFamily unclaimed

An attacker may be able to cause unexpected system termination or read kernel memory

Credited as Charles Stevenson

CVE-2026-112515 BR2026-0000-033374 IOHIDFamily unclaimed

An attacker may be able to cause unexpected system termination or read kernel memory

Credited as Seung Je Seong

CVE-2026-112515 BR2026-0000-033375 IOHIDFamily unclaimed

An attacker may be able to cause unexpected system termination or read kernel memory

Credited as Mathis Mansière

CVE-2026-65385 BR2026-0000-033376 IOKit unclaimed

A buffer overflow may result in memory corruption and unexpected app termination

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112459 BR2026-0000-033377 IOMobileFrameBuffer unclaimed

An app may be able to cause unexpected system termination or corrupt kernel memory

Credited as Lily Cohl (@GenericCoding)

CVE-2026-112554 BR2026-0000-033378 IOStorageFamily unclaimed