Apple

iOS 27.2 and iPadOS 27.2

149230 Oct 26, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149230. 163 CVE entries, 24 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149230

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

339 lines

Showing 201–250 of 339 , page 5 of 7

CVE-2026-86925 BR2026-0000-033462 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Jakob Pammer

CVE-2026-86925 BR2026-0000-033463 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Stuart Wallace

CVE-2026-86925 BR2026-0000-033464 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as hamayanhamayan

CVE-2026-86925 BR2026-0000-033465 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Vinay Kumar Rasala (Xplo8E) from Appknox

CVE-2026-86925 BR2026-0000-033466 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Daniel Rodríguez

CVE-2026-86925 BR2026-0000-033467 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v)

CVE-2026-86925 BR2026-0000-033468 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Rahul Raj

CVE-2026-86925 BR2026-0000-033469 Quick Look unclaimed

An app may be able to access sensitive user data

Credited as Mustafa Calap (@ordinal0, dbg.re)

CVE-2026-112491 BR2026-0000-033470 RealityKit unclaimed

Processing a maliciously crafted file may lead to unexpected app termination

Credited as Hongsik Kim (mnur)

CVE-2026-112547 BR2026-0000-033471 ReplayKit unclaimed

An app may be able to access sensitive user data

Credited as Stuart Wallace

CVE-2026-112425 BR2026-0000-033472 SceneKit unclaimed

Processing a 3D model may result in disclosure of process memory

Credited as stratan (@5tratan)

CVE-2026-112423 BR2026-0000-033473 SceneKit unclaimed

Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

Credited as Rahul Raj

CVE-2026-112464 BR2026-0000-033474 SceneKit unclaimed

Processing a maliciously crafted file may lead to heap corruption

Credited as 정우 하 (@0xfa11babe)

CVE-2026-112464 BR2026-0000-033475 SceneKit unclaimed

Processing a maliciously crafted file may lead to heap corruption

Credited as Narendra Singh (@_3P1C)

CVE-2026-86991 BR2026-0000-033476 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected process termination

Credited as Cem Onat Karagun

CVE-2026-86991 BR2026-0000-033477 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected process termination

Credited as Yujung Choi (@Dusker)

CVE-2026-86991 BR2026-0000-033478 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected process termination

Credited as Mathis Mansière

CVE-2026-86991 BR2026-0000-033479 SceneKit unclaimed

Processing a maliciously crafted file may lead to unexpected process termination

Credited as Rahul Raj

CVE-2026-112616 BR2026-0000-033480 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as Drin Raci of sentry.security

CVE-2026-112616 BR2026-0000-033481 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as Chris Bailey - Short Circuit

CVE-2026-112616 BR2026-0000-033482 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as Mustafa Calap (@ordinal0, dbg.re)

CVE-2026-112616 BR2026-0000-033483 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as Robert Mindo

CVE-2026-112616 BR2026-0000-033484 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as N.M.Praveen Nawarathne (@zblockrat)

CVE-2026-112616 BR2026-0000-033485 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v)

CVE-2026-112616 BR2026-0000-033486 Screen Time unclaimed

An app may be able to access sensitive user data

Credited as Sindre Sorhus

CVE-2026-113913 BR2026-0000-033487 Security unclaimed

Processing web content may disclose sensitive information

Credited as Niels Hofmans

CVE-2026-113913 BR2026-0000-033488 Security unclaimed

Processing web content may disclose sensitive information

Credited as Stav Nir

CVE-2026-113913 BR2026-0000-033489 Security unclaimed

Processing web content may disclose sensitive information

Credited as Vladimir Tokarev

CVE-2026-112652 BR2026-0000-033490 Security unclaimed

An malicious app may be able to bypass certificate validation

Credited as Aditya Kumar

CVE-2026-112559 BR2026-0000-033491 Shortcuts unclaimed

An app may be able to access sensitive user data

Credited as Lucas Lammer

CVE-2026-112559 BR2026-0000-033492 Shortcuts unclaimed

An app may be able to access sensitive user data

Credited as Stuart Wallace

CVE-2026-112455 BR2026-0000-033493 Shortcuts unclaimed

An app may be able to access sensitive user data

Credited as Chris Bailey - Short Circuit

CVE-2026-112455 BR2026-0000-033494 Shortcuts unclaimed

An app may be able to access sensitive user data

Credited as Rahul Raj

CVE-2026-112658 BR2026-0000-033495 Siri unclaimed

An app may be able to access sensitive user data

Credited as Mickey Jin (@patch1t)

CVE-2026-112685 BR2026-0000-033496 Siri unclaimed

An app may be able to access sensitive user data

Credited as silo

CVE-2026-112685 BR2026-0000-033497 Siri unclaimed

An app may be able to access sensitive user data

Credited as Abodi Dawoud

CVE-2022-26704 BR2026-0000-033498 Spotlight unclaimed

An app may be able to gain elevated privileges

Credited as Joshua Mason of Mandiant

CVE-2022-26704 BR2026-0000-033499 Spotlight unclaimed

An app may be able to gain elevated privileges

Credited as Gergely Kalman (@gergely_kalman)

CVE-2026-112567 BR2026-0000-033500 Spotlight unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as zenith

CVE-2026-112628 BR2026-0000-033501 Spotlight unclaimed

An app may be able to access sensitive user data

Credited as Santiago Albertengo

CVE-2026-112628 BR2026-0000-033502 Spotlight unclaimed

An app may be able to access sensitive user data

Credited as Chris Bailey - Short Circuit

CVE-2026-112646 BR2026-0000-033503 SpringBoard unclaimed

An app may be able to cause unexpected system termination or corrupt process memory

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-112691 BR2026-0000-033504 SwiftUI unclaimed

An app may be able to cause unexpected system termination

Credited as @Licht_jb

CVE-2026-86968 BR2026-0000-033505 System Preferences unclaimed

A malicious app may be able to access restricted system interfaces or launder launch attribution

Credited as Sindre Sorhus

CVE-2026-84605 BR2026-0000-033506 TextKit unclaimed

An app may be able to read the device's name

Credited as Sindre Sorhus

CVE-2026-112595 BR2026-0000-033507 Thread unclaimed

An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network

Credited as Wesley Wineberg

CVE-2026-112479 BR2026-0000-033508 USB unclaimed

A malicious USB device may be able to cause unexpected system termination or read kernel memory

Credited as Rotce

CVE-2026-112479 BR2026-0000-033509 USB unclaimed

A malicious USB device may be able to cause unexpected system termination or read kernel memory

Credited as Sandeep Wawdane (thecybersandeep)

CVE-2026-112479 BR2026-0000-033510 USB unclaimed

A malicious USB device may be able to cause unexpected system termination or read kernel memory

Credited as Marc Newlin of SkySafe

CVE-2026-112479 BR2026-0000-033511 USB unclaimed

A malicious USB device may be able to cause unexpected system termination or read kernel memory

Credited as Ankur Saini of Volexity