Apple

iOS 27 and iPadOS 27

149034 Sep 14, 2026 Source: Vendor

Imported by the Apple release catcher from https://support.apple.com/en-us/149034. 126 CVE entries, 67 additional recognitions. Available for: iPhone 11 and later, iPad Pro 12.9-inch 4th generation and later, iPad Pro 11-inch 2nd generation and later, iPad Air 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://support.apple.com/en-us/149034

Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

378 lines

Showing 1–50 of 378 · page 1 of 8

CVE-2026-86882 BR2026-0000-012227 Accelerate Framework unclaimed

Processing a maliciously crafted image may lead to unexpected process termination

Credited as Peter Malone

CVE-2026-43664 BR2026-0000-012228 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Stuart Wallace

CVE-2026-43664 BR2026-0000-012229 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v)

CVE-2026-43664 BR2026-0000-012230 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Rosyna Keller of Totally Not Malicious Software

CVE-2026-43664 BR2026-0000-012231 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as CJ Vana

CVE-2026-43664 BR2026-0000-012232 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as David Strnadel

CVE-2026-43664 BR2026-0000-012233 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Daniel Febrero

CVE-2026-43664 BR2026-0000-012234 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Asaf Cohen

CVE-2026-43664 BR2026-0000-012235 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Gongyu Ma (@Mezone0)

CVE-2026-43664 BR2026-0000-012236 Accessibility unclaimed

An app may be able to access sensitive user data

Credited as Jian Lee (@speedyfriend433)

CVE-2026-64761 BR2026-0000-012237 Accessibility unclaimed

An app may be able to identify what other apps a user has installed

Credited as Stuart Wallace

CVE-2026-64761 BR2026-0000-012238 Accessibility unclaimed

An app may be able to identify what other apps a user has installed

Credited as Sindre Sorhus

CVE-2026-65404 BR2026-0000-012239 Accounts unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as Arni Hardarson (Neonix Security)

CVE-2026-65404 BR2026-0000-012240 Accounts unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as Vinay Kumar Rasala (Xplo8E) from Appknox

CVE-2026-65404 BR2026-0000-012241 Accounts unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as Stuart Wallace

CVE-2026-65404 BR2026-0000-012242 Accounts unclaimed

A malicious application may be able to bypass Privacy preferences

Credited as 이재영

CVE-2026-84523 BR2026-0000-012243 APFS unclaimed

An app may be able to cause unexpected system termination or write kernel memory

Credited as Cem Onat Karagun

CVE-2026-86888 BR2026-0000-012244 App Store unclaimed

A local app may be able to read a persistent account identifier

Credited as Zhongcheng Li (CK01)

CVE-2026-20683 BR2026-0000-012245 Apple Account unclaimed

An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account

Credited as Dem0ns (@天府简易信工作室)

CVE-2026-20683 BR2026-0000-012246 Apple Account unclaimed

An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account

Credited as Abdelhak Kherroubi

CVE-2026-20683 BR2026-0000-012247 Apple Account unclaimed

An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account

Credited as Jasminder Pal Singh

CVE-2026-20683 BR2026-0000-012248 Apple Account unclaimed

An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account

Credited as Lehan Dilusha Jayasingha (Sri Lanka)

CVE-2026-65408 BR2026-0000-012249 Apple Neural Engine unclaimed

An app may be able to cause unexpected system termination

Credited as tamdao

CVE-2026-65407 BR2026-0000-012250 AppleAVD unclaimed

An app may be able to cause unexpected system termination

Credited as Franco Belman at Blackwing Intelligence

CVE-2026-84519 BR2026-0000-012251 AppleDouble unclaimed

Mounting a disk image with maliciously crafted files may lead to unexpected system termination

Credited as Richard Zana

CVE-2026-84593 BR2026-0000-012252 AppleKeyStore unclaimed

An app may be able to cause unexpected system termination

Credited as Meta Red Team X - Nik Tsytsarkin

CVE-2026-84593 BR2026-0000-012253 AppleKeyStore unclaimed

An app may be able to cause unexpected system termination

Credited as Alexandre Borges

CVE-2026-86905 BR2026-0000-012254 Authentication Services unclaimed

An app may be able to delete credentials stored in Keychain

Credited as Ilya Andr (andrd3v)

CVE-2026-84583 BR2026-0000-012255 AuthKit unclaimed

A local app may be able to read a persistent account identifier

Credited as Zhongcheng Li from IES Red Team

CVE-2026-65410 BR2026-0000-012256 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-84616 BR2026-0000-012257 AVEVideoEncoder unclaimed

An app may be able to cause unexpected system termination

Credited as Peter Malone

CVE-2026-84607 BR2026-0000-012258 AVEVideoEncoder unclaimed

A sandboxed app may be able to execute arbitrary code with kernel privileges

Credited as Ruslan Dautov

CVE-2026-65406 BR2026-0000-012259 BackgroundAssets unclaimed

An app may be able to access sensitive user data

Credited as Ye Zhang (@VAR10CK) of Baidu Security

CVE-2026-86885 BR2026-0000-012260 Baseband unclaimed

An attacker in radio range may be able to cause unexpected system termination

Credited as Tuan D. Hoang

CVE-2026-86885 BR2026-0000-012261 Baseband unclaimed

An attacker in radio range may be able to cause unexpected system termination

Credited as Hazem Issa

CVE-2026-86885 BR2026-0000-012262 Baseband unclaimed

An attacker in radio range may be able to cause unexpected system termination

Credited as and Yongdae Kim @ KAIST SysSec Lab

CVE-2026-86879 BR2026-0000-012263 Baseband unclaimed

A remote attacker may be able to cause a denial-of-service

Credited as Hazem Issa

CVE-2026-86879 BR2026-0000-012264 Baseband unclaimed

A remote attacker may be able to cause a denial-of-service

Credited as Yongdae Kim @ SysSec

CVE-2026-86879 BR2026-0000-012265 Baseband unclaimed

A remote attacker may be able to cause a denial-of-service

Credited as KAIST

CVE-2026-86878 BR2026-0000-012266 Camera unclaimed

An app may be able to access sensitive user data

Credited as Sindre Sorhus

CVE-2026-86878 BR2026-0000-012267 Camera unclaimed

An app may be able to access sensitive user data

Credited as Ilya Andr (andrd3v) of Positive Technologies

CVE-2026-86878 BR2026-0000-012268 Camera unclaimed

An app may be able to access sensitive user data

Credited as Asaf Cohen

CVE-2026-86895 BR2026-0000-012269 CloudKit unclaimed

A local app may be able to read a persistent account identifier

Credited as Stanislav Jelezoglo

CVE-2026-86893 BR2026-0000-012270 CloudKit unclaimed

An app may be able to read device name

Credited as Heiner Gerdes

CVE-2026-65399 BR2026-0000-012271 copyfile unclaimed

An archive may be able to bypass Gatekeeper

Credited as Rishabh Jain (rjcyber) of cyberplanet

CVE-2026-65399 BR2026-0000-012272 copyfile unclaimed

An archive may be able to bypass Gatekeeper

Credited as Pasquale Scola

CVE-2026-64752 BR2026-0000-012273 CoreMedia unclaimed

Processing a maliciously crafted image may lead to arbitrary code execution

Credited as Nik Tsytsarkin

CVE-2026-86876 BR2026-0000-012274 CoreMedia unclaimed

A sandboxed process may be able to circumvent sandbox restrictions

Credited as Chris Bailey - Short Circuit

CVE-2026-65344 BR2026-0000-012275 CoreMedia unclaimed

Processing a maliciously crafted video file may lead to unexpected app termination

Credited as Siyeong kim

CVE-2026-84624 BR2026-0000-012276 CoreML unclaimed

A sandboxed app may be able to access restricted files

Credited as AL Najafi