Security feed

24 October 2026

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability

Apple iOS, iPadOS, and watchOS WebKit contain an unspecified vulnerability that allows for universal cross-site scripting (XSS) when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. CISA required action: Apply updates per vendor instructions.

iOS, iPadOS, and watchOS CVE-2021-1879

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2021-1879

iOS, iPadOS, and watchOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2021-1879
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #3504 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:36:15 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message. CISA required action: Apply updates per vendor instructions.

iOS, iPadOS, and watchOS CVE-2020-9819

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-9819

iOS, iPadOS, and watchOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-9819
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2999 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:27:14 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability

Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message. CISA required action: Apply updates per vendor instructions.

iOS, iPadOS, and watchOS CVE-2020-9818

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-9818

iOS, iPadOS, and watchOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-9818
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2998 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:27:14 GMT
Publisher date: Wed, 03 Nov 2021 00:00:00 GMT

Read the original announcement

advisoryCISA Known Exploited Vulnerabilities24 Oct 2026

Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

iOS, iPadOS, and watchOS CVE-2023-41061

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2023-41061

iOS, iPadOS, and watchOS

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2023-41061
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #1267 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 20:59:01 GMT
Publisher date: Mon, 11 Sep 2023 00:00:00 GMT

Read the original announcement