Apple

iOS 27.2 and iPadOS 27.2

149230 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149230

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

339 lines

Showing 151–200 of 339 matching , page 4 of 7 , clear filters

CVE-2026-112476 BR2026-0000-033412 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Arnold Cartagena

CVE-2026-112476 BR2026-0000-033413 Kernel unclaimed

An app may be able to cause unexpected system termination

Credited as Matt Suiche (@msuiche) of Tolmo

CVE-2026-112665 BR2026-0000-033414 Kernel unclaimed

An app may be able to determine kernel memory layout

Credited as Will Estes

CVE-2026-112624 BR2026-0000-033415 Kernel unclaimed

An app may be able to bypass Privacy preferences

Credited as Jerry L. Knot

CVE-2026-112522 BR2026-0000-033416 libarchive unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Eliya M.

CVE-2026-112522 BR2026-0000-033417 libarchive unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Viacheslav Radiukov

CVE-2026-112522 BR2026-0000-033418 libarchive unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Tristan Madani (Talence Security)

CVE-2026-112522 BR2026-0000-033419 libarchive unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Robert Tran

CVE-2026-112621 BR2026-0000-033420 LinkPresentation unclaimed

Processing a maliciously crafted image may result in memory corruption

Credited as Vinay Kumar Rasala (Xplo8E) from Appknox

CVE-2026-112671 BR2026-0000-033421 Mail unclaimed

A remote attacker may be able to cause a denial-of-service

Credited as Nathaniel Oh (@calysteon)

CVE-2026-112414 BR2026-0000-033422 Mail unclaimed

Processing a maliciously crafted message may lead to a denial-of-service

Credited as Daniel Rodríguez

CVE-2026-112414 BR2026-0000-033423 Mail unclaimed

Processing a maliciously crafted message may lead to a denial-of-service

Credited as Nathaniel Oh (@calysteon)

CVE-2026-112707 BR2026-0000-033424 Maps unclaimed

An app may be able to identify what other apps a user has installed

Credited as Sindre Sorhus

CVE-2026-112607 BR2026-0000-033425 mDNSResponder unclaimed

A remote attacker may be able to leak memory

Credited as Pasquale Scola

CVE-2026-113915 BR2026-0000-033426 MediaAnalysis unclaimed

An app may be able to access sensitive user data

Credited as Abodi Dawoud

CVE-2026-113915 BR2026-0000-033427 MediaAnalysis unclaimed

An app may be able to access sensitive user data

Credited as Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

CVE-2026-113915 BR2026-0000-033428 MediaAnalysis unclaimed

An app may be able to access sensitive user data

Credited as Zhongquan Li (@Guluisacat)

CVE-2026-113915 BR2026-0000-033429 MediaAnalysis unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v) of Positive Technologies

CVE-2026-112687 BR2026-0000-033430 MediaRemote unclaimed

An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

Credited as Azize Rhounam

CVE-2026-112687 BR2026-0000-033431 MediaRemote unclaimed

An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

Credited as Rahul Raj

CVE-2026-112682 BR2026-0000-033432 Messages unclaimed

A remote attacker may be able to cause unexpected app termination

Credited as Mahmoud Abdelmoniem

CVE-2026-86989 BR2026-0000-033433 MobileGestalt unclaimed

An app may be able to fingerprint the user

Credited as Zhongcheng Li (CK01)

CVE-2026-86989 BR2026-0000-033434 MobileGestalt unclaimed

An app may be able to fingerprint the user

Credited as Ilya Andr (andrd3v) of Positive Technologies

CVE-2026-112565 BR2026-0000-033435 Model I/O unclaimed