{"schema_version":"1","data":[{"id":42233,"advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","source_published_at":"2026-10-20T00:50:50.06+00:00","published_at":"2026-10-25T11:40:38.931463+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86913"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42200,"advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","source_published_at":"2026-10-20T00:50:51.428+00:00","published_at":"2026-10-25T11:40:16.045756+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86918"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42196,"advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","source_published_at":"2026-10-20T00:50:39.589+00:00","published_at":"2026-10-25T11:40:13.341373+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84613"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42146,"advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","source_published_at":"2026-10-20T00:50:55.409+00:00","published_at":"2026-10-25T11:39:36.16581+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86957"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42143,"advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","source_published_at":"2026-10-20T00:50:54.619+00:00","published_at":"2026-10-25T11:39:33.54099+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86953"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42139,"advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","source_published_at":"2026-10-20T00:50:56.724+00:00","published_at":"2026-10-25T11:39:30.765777+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86975"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42137,"advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","source_published_at":"2026-10-20T00:50:56.208+00:00","published_at":"2026-10-25T11:39:29.334566+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86962"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42027,"advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","source_published_at":"2026-09-14T20:50:31.612+00:00","published_at":"2026-10-25T11:38:16.508416+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86903"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42022,"advisory_id":"8b952e42-1ee5-4ff5-b473-e57086eb6795","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86884","source_published_at":"2026-09-14T20:49:41.384+00:00","published_at":"2026-10-25T11:38:13.191128+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"cve_ids":["CVE-2026-86884"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86884","summary":"A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-86884","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86884","aliases":["CVE-2026-86884"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.594Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86884","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:50:08.504536Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:50:11.207Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.594Z"}}},"related_cves":[{"value":"CVE-2026-86884","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42021,"advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","source_published_at":"2026-09-14T20:51:07.153+00:00","published_at":"2026-10-25T11:38:12.525233+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86882"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42020,"advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","source_published_at":"2026-09-14T20:47:49.094+00:00","published_at":"2026-10-25T11:38:11.919433+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-86881"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42014,"advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","source_published_at":"2026-09-14T20:50:08.749+00:00","published_at":"2026-10-25T11:38:08.095002+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84636"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42013,"advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","source_published_at":"2026-09-14T20:49:05.014+00:00","published_at":"2026-10-25T11:38:07.48677+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84635"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42011,"advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","source_published_at":"2026-09-14T20:50:47.768+00:00","published_at":"2026-10-25T11:38:06.24765+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84626"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42010,"advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","source_published_at":"2026-09-14T20:50:54.789+00:00","published_at":"2026-10-25T11:38:05.621275+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84630"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42008,"advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","source_published_at":"2026-09-14T20:48:59.138+00:00","published_at":"2026-10-25T11:38:04.402306+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84622"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42006,"advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","source_published_at":"2026-09-14T20:48:25.038+00:00","published_at":"2026-10-25T11:38:03.141099+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84602"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42005,"advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","source_published_at":"2026-09-14T20:49:55.958+00:00","published_at":"2026-10-25T11:38:02.48258+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84600"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":42002,"advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","source_published_at":"2026-10-20T00:50:37.797+00:00","published_at":"2026-10-25T11:38:00.427406+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84582"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41997,"advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","source_published_at":"2026-09-14T20:50:09.688+00:00","published_at":"2026-10-25T11:37:57.232687+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84564"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41996,"advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","source_published_at":"2026-09-14T20:47:15.829+00:00","published_at":"2026-10-25T11:37:56.601292+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84560"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41995,"advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","source_published_at":"2026-09-14T20:48:10.362+00:00","published_at":"2026-10-25T11:37:55.984648+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84561"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41983,"advisory_id":"256c8e5c-2c0d-4b4b-88d7-6ef20fdfb8e8","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84533","source_published_at":"2026-09-14T20:50:12.835+00:00","published_at":"2026-10-25T11:37:48.397521+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","watchos"],"cve_ids":["CVE-2026-84533"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84533","summary":"A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.","evidence":"cve:CVE-2026-84533","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84533","aliases":["CVE-2026-84533"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:30.458Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84533","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T20:28:57.715678Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-353","description":"CWE-353 Missing Support for Integrity Check"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T20:29:02.526Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:30.458Z"}}},"related_cves":[{"value":"CVE-2026-84533","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41981,"advisory_id":"37ed610a-5f4b-4bf8-b3b2-7f9eee670afb","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84530","source_published_at":"2026-09-14T20:49:11.174+00:00","published_at":"2026-10-25T11:37:47.155428+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84530"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84530","summary":"An information disclosure issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-84530","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84530","aliases":["CVE-2026-84530"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.820Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84530","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:56:47.638619Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:56:52.050Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.820Z"}}},"related_cves":[{"value":"CVE-2026-84530","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41980,"advisory_id":"e6982cc3-3117-4099-ad4e-fa25305cd6ad","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84523","source_published_at":"2026-09-14T20:51:02.122+00:00","published_at":"2026-10-25T11:37:46.540994+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84523"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84523","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or write kernel memory.","evidence":"cve:CVE-2026-84523","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84523","aliases":["CVE-2026-84523"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:29.405Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84523","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:07:39.091661Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:07:45.300Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:29.405Z"}}},"related_cves":[{"value":"CVE-2026-84523","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41975,"advisory_id":"a27ba772-e7ca-4587-bff6-7a418b6f840f","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84507","source_published_at":"2026-09-14T20:48:41.928+00:00","published_at":"2026-10-25T11:37:42.325018+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-84507"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-84507","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84507","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84507","aliases":["CVE-2026-84507"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:27.306Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84507","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-17T15:39:18.500348Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:39:21.690Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.306Z"}}},"related_cves":[{"value":"CVE-2026-84507","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41973,"advisory_id":"37ca52bb-5388-4106-a478-b3118404b0e0","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65415","source_published_at":"2026-09-14T20:50:40.841+00:00","published_at":"2026-10-25T11:37:38.772231+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-65415"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65415","summary":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.","evidence":"cve:CVE-2026-65415","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65415","aliases":["CVE-2026-65415"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:26.275Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65415","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:12:45.986053Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:12:53.547Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:26.275Z"}}},"related_cves":[{"value":"CVE-2026-65415","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41972,"advisory_id":"c0cf92a8-eee5-41fb-812d-c8d7dea67953","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65414","source_published_at":"2026-09-14T20:49:46.12+00:00","published_at":"2026-10-25T11:37:36.221973+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-65414"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65414","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.","evidence":"cve:CVE-2026-65414","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65414","aliases":["CVE-2026-65414"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:25.949Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65414","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-14T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T03:55:38.445Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:25.949Z"}}},"related_cves":[{"value":"CVE-2026-65414","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41971,"advisory_id":"cd3f7305-d89e-4d14-b3f5-a79bc5d9966d","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65409","source_published_at":"2026-09-14T20:52:04.716+00:00","published_at":"2026-10-25T11:37:34.873261+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-65409"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65409","summary":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause a denial of service.","evidence":"cve:CVE-2026-65409","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65409","aliases":["CVE-2026-65409"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:25.630Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65409","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T17:43:56.878679Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T17:46:56.951Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:25.630Z"}}},"related_cves":[{"value":"CVE-2026-65409","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false},{"id":41970,"advisory_id":"ede9ff1a-77d3-47df-b3bd-cac153bf79c6","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-65407","source_published_at":"2026-09-14T20:47:50.989+00:00","published_at":"2026-10-25T11:37:33.364942+00:00","extraction_method":"structured","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"cve_ids":["CVE-2026-65407"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"CVE-2026-65407","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.6 and iPadOS 26.6, iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7, tvOS 26.6, tvOS 27, visionOS 26.6, visionOS 27, watchOS 26.6, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-65407","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-65407","aliases":["CVE-2026-65407"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.6","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.6","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"26.6","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"26.6","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"26.6","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:25.318Z","provider":"cve","references":["https://support.apple.com/en-us/128066","https://support.apple.com/en-us/128067","https://support.apple.com/en-us/128068","https://support.apple.com/en-us/128069","https://support.apple.com/en-us/128070","https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-65407","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T17:48:21.694489Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T17:48:25.200Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:25.318Z"}}},"related_cves":[{"value":"CVE-2026-65407","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"context_update":false}],"next_after":42233,"next_before":41970}