{"schema_version":"2","view":"grouped","data":[{"id":46100,"cve_ids":["CVE-2026-86922"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","event_types":["advisory"],"published_at":"2026-10-25T12:37:09.448923+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.28+00:00","detail_url":"/advisories/advisory%3Ade1ce12f-a15c-4d92-b1af-f7255f1810cc","group":{"id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","revision":1,"primary_event_id":45656,"change":"published","superseded_by":[],"changed":{"id":45656,"cve_ids":["CVE-2026-86922"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","event_types":["advisory"],"published_at":"2026-10-25T12:37:09.448923+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.28+00:00","detail_url":"/events/45656"},"members":[{"id":45656,"cve_ids":["CVE-2026-86922"],"payload":{"kind":"advisory","title":"CVE-2026-86922","summary":"A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.","evidence":"cve:CVE-2026-86922","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86922","aliases":["CVE-2026-86922"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:11.279Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86922","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:11.279Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:52.280Z"}}},"related_cves":[{"value":"CVE-2026-86922","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:de1ce12f-a15c-4d92-b1af-f7255f1810cc","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86922","advisory_id":"de1ce12f-a15c-4d92-b1af-f7255f1810cc","event_types":["advisory"],"published_at":"2026-10-25T12:37:09.448923+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:52.28+00:00","detail_url":"/events/45656"}]}},{"id":46099,"cve_ids":["CVE-2026-86919"],"payload":{"kind":"advisory","title":"CVE-2026-86919","summary":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","evidence":"cve:CVE-2026-86919","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86919","aliases":["CVE-2026-86919"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:16.541Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86919","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:16.541Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.749Z"}}},"related_cves":[{"value":"CVE-2026-86919","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86919","advisory_id":"cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","event_types":["advisory"],"published_at":"2026-10-25T12:37:08.837816+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.749+00:00","detail_url":"/advisories/advisory%3Acb5eb559-93eb-45b4-89f6-1b4f63f51ba5","group":{"id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","revision":1,"primary_event_id":45655,"change":"published","superseded_by":[],"changed":{"id":45655,"cve_ids":["CVE-2026-86919"],"payload":{"kind":"advisory","title":"CVE-2026-86919","summary":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","evidence":"cve:CVE-2026-86919","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86919","aliases":["CVE-2026-86919"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:16.541Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86919","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:16.541Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.749Z"}}},"related_cves":[{"value":"CVE-2026-86919","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86919","advisory_id":"cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","event_types":["advisory"],"published_at":"2026-10-25T12:37:08.837816+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.749+00:00","detail_url":"/events/45655"},"members":[{"id":45655,"cve_ids":["CVE-2026-86919"],"payload":{"kind":"advisory","title":"CVE-2026-86919","summary":"A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.","evidence":"cve:CVE-2026-86919","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86919","aliases":["CVE-2026-86919"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-21T03:56:16.541Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"ADJACENT_NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86919","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-20T00:00:00+00:00"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-121","description":"CWE-121 Stack-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-21T03:56:16.541Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.749Z"}}},"related_cves":[{"value":"CVE-2026-86919","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86919","advisory_id":"cb5eb559-93eb-45b4-89f6-1b4f63f51ba5","event_types":["advisory"],"published_at":"2026-10-25T12:37:08.837816+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.749+00:00","detail_url":"/events/45655"}]}},{"id":42645,"cve_ids":["CVE-2026-86872"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","event_types":["advisory"],"published_at":"2026-10-25T11:40:51.70262+00:00","technologies":["core-cve","safari","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:44.084+00:00","detail_url":"/advisories/advisory%3A65be4f41-efa4-4457-b3f8-28c4e42f1eb9","group":{"id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","revision":1,"primary_event_id":42252,"change":"published","superseded_by":[],"changed":{"id":42252,"cve_ids":["CVE-2026-86872"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","event_types":["advisory"],"published_at":"2026-10-25T11:40:51.70262+00:00","technologies":["core-cve","safari","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:44.084+00:00","detail_url":"/events/42252"},"members":[{"id":42252,"cve_ids":["CVE-2026-86872"],"payload":{"kind":"advisory","title":"CVE-2026-86872","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpected behavior.","evidence":"cve:CVE-2026-86872","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86872","aliases":["CVE-2026-86872"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T15:13:01.203Z","provider":"cve","references":["https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86872","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T15:12:57.460534Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T15:13:01.203Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:44.084Z"}}},"related_cves":[{"value":"CVE-2026-86872","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:65be4f41-efa4-4457-b3f8-28c4e42f1eb9","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86872","advisory_id":"65be4f41-efa4-4457-b3f8-28c4e42f1eb9","event_types":["advisory"],"published_at":"2026-10-25T11:40:51.70262+00:00","technologies":["core-cve","safari","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:44.084+00:00","detail_url":"/events/42252"}]}},{"id":42626,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/advisories/advisory%3A12aeb3f8-8840-4cee-84e7-0d3305242ea4","group":{"id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","revision":1,"primary_event_id":42233,"change":"published","superseded_by":[],"changed":{"id":42233,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/events/42233"},"members":[{"id":42233,"cve_ids":["CVE-2026-86913"],"payload":{"kind":"advisory","title":"CVE-2026-86913","summary":"A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.","evidence":"cve:CVE-2026-86913","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86913","aliases":["CVE-2026-86913"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:56:36.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86913","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:56:33.198658Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-416","description":"CWE-416 Use After Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:56:36.638Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:50.060Z"}}},"related_cves":[{"value":"CVE-2026-86913","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:12aeb3f8-8840-4cee-84e7-0d3305242ea4","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86913","advisory_id":"12aeb3f8-8840-4cee-84e7-0d3305242ea4","event_types":["advisory"],"published_at":"2026-10-25T11:40:38.931463+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:50.06+00:00","detail_url":"/events/42233"}]}},{"id":42624,"cve_ids":["CVE-2026-84508"],"payload":{"kind":"advisory","title":"CVE-2026-84508","summary":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-84508","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84508","aliases":["CVE-2026-84508"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:55:43.182Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84508","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:55:35.320274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:55:43.182Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.719Z"}}},"related_cves":[{"value":"CVE-2026-84508","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84508","advisory_id":"20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","event_types":["advisory"],"published_at":"2026-10-25T11:40:37.466238+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:27.719+00:00","detail_url":"/advisories/advisory%3A20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","group":{"id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","revision":1,"primary_event_id":42231,"change":"published","superseded_by":[],"changed":{"id":42231,"cve_ids":["CVE-2026-84508"],"payload":{"kind":"advisory","title":"CVE-2026-84508","summary":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-84508","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84508","aliases":["CVE-2026-84508"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:55:43.182Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84508","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:55:35.320274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:55:43.182Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.719Z"}}},"related_cves":[{"value":"CVE-2026-84508","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84508","advisory_id":"20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","event_types":["advisory"],"published_at":"2026-10-25T11:40:37.466238+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:27.719+00:00","detail_url":"/events/42231"},"members":[{"id":42231,"cve_ids":["CVE-2026-84508"],"payload":{"kind":"advisory","title":"CVE-2026-84508","summary":"This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.","evidence":"cve:CVE-2026-84508","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84508","aliases":["CVE-2026-84508"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:55:43.182Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149042"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84508","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:55:35.320274Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-284","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:55:43.182Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:27.719Z"}}},"related_cves":[{"value":"CVE-2026-84508","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84508","advisory_id":"20f0cf5c-69ed-4a0b-94d0-fd9a3cd97db8","event_types":["advisory"],"published_at":"2026-10-25T11:40:37.466238+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:27.719+00:00","detail_url":"/events/42231"}]}},{"id":42617,"cve_ids":["CVE-2026-28850"],"payload":{"kind":"advisory","title":"CVE-2026-28850","summary":"An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-28850","products":[{"name":{"value":"visionOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28850","aliases":["CVE-2026-28850"],"metrics":[],"affected":[{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:50:41.147Z","provider":"cve","references":["https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28850","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:50:38.094231Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:50:41.147Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:04.249Z"}}},"related_cves":[{"value":"CVE-2026-28850","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a0110d5-d3ea-4a8c-8924-90d3821631a0","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28850","advisory_id":"4a0110d5-d3ea-4a8c-8924-90d3821631a0","event_types":["advisory"],"published_at":"2026-10-25T11:40:32.009685+00:00","technologies":["core-cve","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:04.249+00:00","detail_url":"/advisories/advisory%3A4a0110d5-d3ea-4a8c-8924-90d3821631a0","group":{"id":"advisory:4a0110d5-d3ea-4a8c-8924-90d3821631a0","revision":1,"primary_event_id":42224,"change":"published","superseded_by":[],"changed":{"id":42224,"cve_ids":["CVE-2026-28850"],"payload":{"kind":"advisory","title":"CVE-2026-28850","summary":"An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-28850","products":[{"name":{"value":"visionOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28850","aliases":["CVE-2026-28850"],"metrics":[],"affected":[{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:50:41.147Z","provider":"cve","references":["https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28850","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:50:38.094231Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:50:41.147Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:04.249Z"}}},"related_cves":[{"value":"CVE-2026-28850","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a0110d5-d3ea-4a8c-8924-90d3821631a0","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28850","advisory_id":"4a0110d5-d3ea-4a8c-8924-90d3821631a0","event_types":["advisory"],"published_at":"2026-10-25T11:40:32.009685+00:00","technologies":["core-cve","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:04.249+00:00","detail_url":"/events/42224"},"members":[{"id":42224,"cve_ids":["CVE-2026-28850"],"payload":{"kind":"advisory","title":"CVE-2026-28850","summary":"An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-28850","products":[{"name":{"value":"visionOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-28850","aliases":["CVE-2026-28850"],"metrics":[],"affected":[{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:50:41.147Z","provider":"cve","references":["https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-28850","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:50:38.094231Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:50:41.147Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:04.249Z"}}},"related_cves":[{"value":"CVE-2026-28850","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4a0110d5-d3ea-4a8c-8924-90d3821631a0","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-28850","advisory_id":"4a0110d5-d3ea-4a8c-8924-90d3821631a0","event_types":["advisory"],"published_at":"2026-10-25T11:40:32.009685+00:00","technologies":["core-cve","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:04.249+00:00","detail_url":"/events/42224"}]}},{"id":42592,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/advisories/advisory%3A2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","group":{"id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","revision":1,"primary_event_id":42200,"change":"published","superseded_by":[],"changed":{"id":42200,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/events/42200"},"members":[{"id":42200,"cve_ids":["CVE-2026-86918"],"payload":{"kind":"advisory","title":"CVE-2026-86918","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination.","evidence":"cve:CVE-2026-86918","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86918","aliases":["CVE-2026-86918"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:04:01.561Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86918","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:03:57.696685Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:04:01.561Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.428Z"}}},"related_cves":[{"value":"CVE-2026-86918","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86918","advisory_id":"2b04ea8d-27ea-4ad9-a80e-9315d6f4d84c","event_types":["advisory"],"published_at":"2026-10-25T11:40:16.045756+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.428+00:00","detail_url":"/events/42200"}]}},{"id":42588,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/advisories/advisory%3Addc64785-f366-4983-aedf-f9441cdff321","group":{"id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","revision":1,"primary_event_id":42196,"change":"published","superseded_by":[],"changed":{"id":42196,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/events/42196"},"members":[{"id":42196,"cve_ids":["CVE-2026-84613"],"payload":{"kind":"advisory","title":"CVE-2026-84613","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in radio range may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84613","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84613","aliases":["CVE-2026-84613"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T14:15:45.219Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84613","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T14:15:39.298444Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T14:15:45.219Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.589Z"}}},"related_cves":[{"value":"CVE-2026-84613","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ddc64785-f366-4983-aedf-f9441cdff321","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84613","advisory_id":"ddc64785-f366-4983-aedf-f9441cdff321","event_types":["advisory"],"published_at":"2026-10-25T11:40:13.341373+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:39.589+00:00","detail_url":"/events/42196"}]}},{"id":42540,"cve_ids":["CVE-2026-86921"],"payload":{"kind":"advisory","title":"CVE-2026-86921","summary":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","evidence":"cve:CVE-2026-86921","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86921","aliases":["CVE-2026-86921"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:36:30.197Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:36:26.500383Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:36:30.197Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.993Z"}}},"related_cves":[{"value":"CVE-2026-86921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86921","advisory_id":"e62cdc16-1aba-459d-aa2a-672d049aaa10","event_types":["advisory"],"published_at":"2026-10-25T11:39:37.760439+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.993+00:00","detail_url":"/advisories/advisory%3Ae62cdc16-1aba-459d-aa2a-672d049aaa10","group":{"id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","revision":1,"primary_event_id":42148,"change":"published","superseded_by":[],"changed":{"id":42148,"cve_ids":["CVE-2026-86921"],"payload":{"kind":"advisory","title":"CVE-2026-86921","summary":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","evidence":"cve:CVE-2026-86921","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86921","aliases":["CVE-2026-86921"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:36:30.197Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:36:26.500383Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:36:30.197Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.993Z"}}},"related_cves":[{"value":"CVE-2026-86921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86921","advisory_id":"e62cdc16-1aba-459d-aa2a-672d049aaa10","event_types":["advisory"],"published_at":"2026-10-25T11:39:37.760439+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.993+00:00","detail_url":"/events/42148"},"members":[{"id":42148,"cve_ids":["CVE-2026-86921"],"payload":{"kind":"advisory","title":"CVE-2026-86921","summary":"A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attacker may be able to overwrite restricted files.","evidence":"cve:CVE-2026-86921","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86921","aliases":["CVE-2026-86921"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:36:30.197Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86921","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:36:26.500383Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-269","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:36:30.197Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:51.993Z"}}},"related_cves":[{"value":"CVE-2026-86921","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:e62cdc16-1aba-459d-aa2a-672d049aaa10","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86921","advisory_id":"e62cdc16-1aba-459d-aa2a-672d049aaa10","event_types":["advisory"],"published_at":"2026-10-25T11:39:37.760439+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:51.993+00:00","detail_url":"/events/42148"}]}},{"id":42538,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/advisories/advisory%3A87d862a4-b47a-4424-bd98-344241a6d827","group":{"id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","revision":1,"primary_event_id":42146,"change":"published","superseded_by":[],"changed":{"id":42146,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/events/42146"},"members":[{"id":42146,"cve_ids":["CVE-2026-86957"],"payload":{"kind":"advisory","title":"CVE-2026-86957","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker in wireless proximity may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86957","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86957","aliases":["CVE-2026-86957"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:23:57.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86957","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:23:10.431694Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:23:57.967Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:55.409Z"}}},"related_cves":[{"value":"CVE-2026-86957","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:87d862a4-b47a-4424-bd98-344241a6d827","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86957","advisory_id":"87d862a4-b47a-4424-bd98-344241a6d827","event_types":["advisory"],"published_at":"2026-10-25T11:39:36.16581+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:55.409+00:00","detail_url":"/events/42146"}]}},{"id":42535,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/advisories/advisory%3Ab3b7cb55-e546-4898-9fb8-c234c42c5239","group":{"id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","revision":1,"primary_event_id":42143,"change":"published","superseded_by":[],"changed":{"id":42143,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/events/42143"},"members":[{"id":42143,"cve_ids":["CVE-2026-86953"],"payload":{"kind":"advisory","title":"CVE-2026-86953","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An attacker in physical proximity may be able to cause a denial-of-service.","evidence":"cve:CVE-2026-86953","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86953","aliases":["CVE-2026-86953"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:25:22.084Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86953","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:25:19.070243Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:25:22.084Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:54.619Z"}}},"related_cves":[{"value":"CVE-2026-86953","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b3b7cb55-e546-4898-9fb8-c234c42c5239","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86953","advisory_id":"b3b7cb55-e546-4898-9fb8-c234c42c5239","event_types":["advisory"],"published_at":"2026-10-25T11:39:33.54099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:54.619+00:00","detail_url":"/events/42143"}]}},{"id":42531,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/advisories/advisory%3Aa5eda251-056f-44c6-9a36-b24bd19afeb5","group":{"id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","revision":1,"primary_event_id":42139,"change":"published","superseded_by":[],"changed":{"id":42139,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/events/42139"},"members":[{"id":42139,"cve_ids":["CVE-2026-86975"],"payload":{"kind":"advisory","title":"CVE-2026-86975","summary":"An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86975","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86975","aliases":["CVE-2026-86975"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:12:23.942Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86975","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:12:20.798941Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:12:23.942Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.724Z"}}},"related_cves":[{"value":"CVE-2026-86975","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:a5eda251-056f-44c6-9a36-b24bd19afeb5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86975","advisory_id":"a5eda251-056f-44c6-9a36-b24bd19afeb5","event_types":["advisory"],"published_at":"2026-10-25T11:39:30.765777+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.724+00:00","detail_url":"/events/42139"}]}},{"id":42529,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/advisories/advisory%3A076102d2-be12-4dd6-96e1-1d7a1970e089","group":{"id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","revision":1,"primary_event_id":42137,"change":"published","superseded_by":[],"changed":{"id":42137,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/events/42137"},"members":[{"id":42137,"cve_ids":["CVE-2026-86962"],"payload":{"kind":"advisory","title":"CVE-2026-86962","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-86962","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86962","aliases":["CVE-2026-86962"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T10:14:10.188Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86962","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-20T10:13:24.182949Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-20T10:14:10.188Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:56.208Z"}}},"related_cves":[{"value":"CVE-2026-86962","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:076102d2-be12-4dd6-96e1-1d7a1970e089","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86962","advisory_id":"076102d2-be12-4dd6-96e1-1d7a1970e089","event_types":["advisory"],"published_at":"2026-10-25T11:39:29.334566+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:56.208+00:00","detail_url":"/events/42137"}]}},{"id":42418,"cve_ids":["CVE-2026-86903"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","event_types":["advisory"],"published_at":"2026-10-25T11:38:16.508416+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:31.612+00:00","detail_url":"/advisories/advisory%3A0e2e097f-05e2-4693-8150-b912dc09df86","group":{"id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","revision":1,"primary_event_id":42027,"change":"published","superseded_by":[],"changed":{"id":42027,"cve_ids":["CVE-2026-86903"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","event_types":["advisory"],"published_at":"2026-10-25T11:38:16.508416+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:31.612+00:00","detail_url":"/events/42027"},"members":[{"id":42027,"cve_ids":["CVE-2026-86903"],"payload":{"kind":"advisory","title":"CVE-2026-86903","summary":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.","evidence":"cve:CVE-2026-86903","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86903","aliases":["CVE-2026-86903"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:48.285Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86903","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:22:26.009169Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-125","description":"CWE-125 Out-of-bounds Read"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:22:29.546Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:48.285Z"}}},"related_cves":[{"value":"CVE-2026-86903","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0e2e097f-05e2-4693-8150-b912dc09df86","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86903","advisory_id":"0e2e097f-05e2-4693-8150-b912dc09df86","event_types":["advisory"],"published_at":"2026-10-25T11:38:16.508416+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:31.612+00:00","detail_url":"/events/42027"}]}},{"id":42417,"cve_ids":["CVE-2026-86898"],"payload":{"kind":"advisory","title":"CVE-2026-86898","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.","evidence":"cve:CVE-2026-86898","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86898","aliases":["CVE-2026-86898"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:56:23.950479Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:56:27.129Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.967Z"}}},"related_cves":[{"value":"CVE-2026-86898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7d869ec7-f208-4dfc-9ad7-360c64b03166","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86898","advisory_id":"7d869ec7-f208-4dfc-9ad7-360c64b03166","event_types":["advisory"],"published_at":"2026-10-25T11:38:15.675282+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:52.675+00:00","detail_url":"/advisories/advisory%3A7d869ec7-f208-4dfc-9ad7-360c64b03166","group":{"id":"advisory:7d869ec7-f208-4dfc-9ad7-360c64b03166","revision":1,"primary_event_id":42026,"change":"published","superseded_by":[],"changed":{"id":42026,"cve_ids":["CVE-2026-86898"],"payload":{"kind":"advisory","title":"CVE-2026-86898","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.","evidence":"cve:CVE-2026-86898","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86898","aliases":["CVE-2026-86898"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:56:23.950479Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:56:27.129Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.967Z"}}},"related_cves":[{"value":"CVE-2026-86898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7d869ec7-f208-4dfc-9ad7-360c64b03166","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86898","advisory_id":"7d869ec7-f208-4dfc-9ad7-360c64b03166","event_types":["advisory"],"published_at":"2026-10-25T11:38:15.675282+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:52.675+00:00","detail_url":"/events/42026"},"members":[{"id":42026,"cve_ids":["CVE-2026-86898"],"payload":{"kind":"advisory","title":"CVE-2026-86898","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting.","evidence":"cve:CVE-2026-86898","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86898","aliases":["CVE-2026-86898"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:47.967Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86898","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:56:23.950479Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-79","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:56:27.129Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:47.967Z"}}},"related_cves":[{"value":"CVE-2026-86898","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7d869ec7-f208-4dfc-9ad7-360c64b03166","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86898","advisory_id":"7d869ec7-f208-4dfc-9ad7-360c64b03166","event_types":["advisory"],"published_at":"2026-10-25T11:38:15.675282+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","visionos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:52.675+00:00","detail_url":"/events/42026"}]}},{"id":42412,"cve_ids":["CVE-2026-86882"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","event_types":["advisory"],"published_at":"2026-10-25T11:38:12.525233+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:07.153+00:00","detail_url":"/advisories/advisory%3A6badc301-1a5f-4070-a7c1-e3fe20804ce8","group":{"id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","revision":1,"primary_event_id":42021,"change":"published","superseded_by":[],"changed":{"id":42021,"cve_ids":["CVE-2026-86882"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","event_types":["advisory"],"published_at":"2026-10-25T11:38:12.525233+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:07.153+00:00","detail_url":"/events/42021"},"members":[{"id":42021,"cve_ids":["CVE-2026-86882"],"payload":{"kind":"advisory","title":"CVE-2026-86882","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected process termination.","evidence":"cve:CVE-2026-86882","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86882","aliases":["CVE-2026-86882"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:46.194Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86882","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:05:59.829427Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:06:04.034Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:46.194Z"}}},"related_cves":[{"value":"CVE-2026-86882","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:6badc301-1a5f-4070-a7c1-e3fe20804ce8","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86882","advisory_id":"6badc301-1a5f-4070-a7c1-e3fe20804ce8","event_types":["advisory"],"published_at":"2026-10-25T11:38:12.525233+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:07.153+00:00","detail_url":"/events/42021"}]}},{"id":42411,"cve_ids":["CVE-2026-86881"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.919433+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:49.094+00:00","detail_url":"/advisories/advisory%3A66c1f8e7-db74-4020-9149-465e86d7fc29","group":{"id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","revision":1,"primary_event_id":42020,"change":"published","superseded_by":[],"changed":{"id":42020,"cve_ids":["CVE-2026-86881"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.919433+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:49.094+00:00","detail_url":"/events/42020"},"members":[{"id":42020,"cve_ids":["CVE-2026-86881"],"payload":{"kind":"advisory","title":"CVE-2026-86881","summary":"A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages.","evidence":"cve:CVE-2026-86881","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86881","aliases":["CVE-2026-86881"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.874Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T12:57:03.171492Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T12:57:12.228Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.874Z"}}},"related_cves":[{"value":"CVE-2026-86881","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:66c1f8e7-db74-4020-9149-465e86d7fc29","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86881","advisory_id":"66c1f8e7-db74-4020-9149-465e86d7fc29","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.919433+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:49.094+00:00","detail_url":"/events/42020"}]}},{"id":42410,"cve_ids":["CVE-2026-86876"],"payload":{"kind":"advisory","title":"CVE-2026-86876","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.","evidence":"cve:CVE-2026-86876","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86876","aliases":["CVE-2026-86876"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.145Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86876","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T22:50:41.690826Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T22:50:45.086Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.145Z"}}},"related_cves":[{"value":"CVE-2026-86876","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86876","advisory_id":"0c41c2dc-eb29-456f-a84c-2feef677cce5","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.297164+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:59.688+00:00","detail_url":"/advisories/advisory%3A0c41c2dc-eb29-456f-a84c-2feef677cce5","group":{"id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","revision":1,"primary_event_id":42019,"change":"published","superseded_by":[],"changed":{"id":42019,"cve_ids":["CVE-2026-86876"],"payload":{"kind":"advisory","title":"CVE-2026-86876","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.","evidence":"cve:CVE-2026-86876","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86876","aliases":["CVE-2026-86876"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.145Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86876","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T22:50:41.690826Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T22:50:45.086Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.145Z"}}},"related_cves":[{"value":"CVE-2026-86876","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86876","advisory_id":"0c41c2dc-eb29-456f-a84c-2feef677cce5","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.297164+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:59.688+00:00","detail_url":"/events/42019"},"members":[{"id":42019,"cve_ids":["CVE-2026-86876"],"payload":{"kind":"advisory","title":"CVE-2026-86876","summary":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. A sandboxed process may be able to circumvent sandbox restrictions.","evidence":"cve:CVE-2026-86876","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86876","aliases":["CVE-2026-86876"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:45.145Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":5.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86876","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-14T22:50:41.690826Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-14T22:50:45.086Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:45.145Z"}}},"related_cves":[{"value":"CVE-2026-86876","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:0c41c2dc-eb29-456f-a84c-2feef677cce5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86876","advisory_id":"0c41c2dc-eb29-456f-a84c-2feef677cce5","event_types":["advisory"],"published_at":"2026-10-25T11:38:11.297164+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:51:59.688+00:00","detail_url":"/events/42019"}]}},{"id":42408,"cve_ids":["CVE-2026-86870"],"payload":{"kind":"advisory","title":"CVE-2026-86870","summary":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.","evidence":"cve:CVE-2026-86870","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86870","aliases":["CVE-2026-86870"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:43.441Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:18:25.583184Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:18:43.549Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.441Z"}}},"related_cves":[{"value":"CVE-2026-86870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86870","advisory_id":"3fb78377-38b7-443d-81c9-a89340bba543","event_types":["advisory"],"published_at":"2026-10-25T11:38:10.047133+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:23.855+00:00","detail_url":"/advisories/advisory%3A3fb78377-38b7-443d-81c9-a89340bba543","group":{"id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","revision":1,"primary_event_id":42017,"change":"published","superseded_by":[],"changed":{"id":42017,"cve_ids":["CVE-2026-86870"],"payload":{"kind":"advisory","title":"CVE-2026-86870","summary":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.","evidence":"cve:CVE-2026-86870","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86870","aliases":["CVE-2026-86870"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:43.441Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:18:25.583184Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:18:43.549Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.441Z"}}},"related_cves":[{"value":"CVE-2026-86870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86870","advisory_id":"3fb78377-38b7-443d-81c9-a89340bba543","event_types":["advisory"],"published_at":"2026-10-25T11:38:10.047133+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:23.855+00:00","detail_url":"/events/42017"},"members":[{"id":42017,"cve_ids":["CVE-2026-86870"],"payload":{"kind":"advisory","title":"CVE-2026-86870","summary":"A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.","evidence":"cve:CVE-2026-86870","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-86870","aliases":["CVE-2026-86870"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:43.441Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-86870","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:18:25.583184Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-122","description":"CWE-122 Heap-based Buffer Overflow"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:18:43.549Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:43.441Z"}}},"related_cves":[{"value":"CVE-2026-86870","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3fb78377-38b7-443d-81c9-a89340bba543","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-86870","advisory_id":"3fb78377-38b7-443d-81c9-a89340bba543","event_types":["advisory"],"published_at":"2026-10-25T11:38:10.047133+00:00","technologies":["core-cve","ios-and-ipados","macos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:23.855+00:00","detail_url":"/events/42017"}]}},{"id":42405,"cve_ids":["CVE-2026-84636"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","event_types":["advisory"],"published_at":"2026-10-25T11:38:08.095002+00:00","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:08.749+00:00","detail_url":"/advisories/advisory%3Aed9402ba-f9f8-4f1a-be6a-f5764f36455a","group":{"id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","revision":1,"primary_event_id":42014,"change":"published","superseded_by":[],"changed":{"id":42014,"cve_ids":["CVE-2026-84636"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","event_types":["advisory"],"published_at":"2026-10-25T11:38:08.095002+00:00","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:08.749+00:00","detail_url":"/events/42014"},"members":[{"id":42014,"cve_ids":["CVE-2026-84636"],"payload":{"kind":"advisory","title":"CVE-2026-84636","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84636","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84636","aliases":["CVE-2026-84636"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:42.399Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84636","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:11:56.837537Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:03.433Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:42.399Z"}}},"related_cves":[{"value":"CVE-2026-84636","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ed9402ba-f9f8-4f1a-be6a-f5764f36455a","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84636","advisory_id":"ed9402ba-f9f8-4f1a-be6a-f5764f36455a","event_types":["advisory"],"published_at":"2026-10-25T11:38:08.095002+00:00","technologies":["core-cve","ios-and-ipados","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:08.749+00:00","detail_url":"/events/42014"}]}},{"id":42404,"cve_ids":["CVE-2026-84635"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","event_types":["advisory"],"published_at":"2026-10-25T11:38:07.48677+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:05.014+00:00","detail_url":"/advisories/advisory%3Abf4eac75-ae77-45d8-94dc-023edcef6079","group":{"id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","revision":1,"primary_event_id":42013,"change":"published","superseded_by":[],"changed":{"id":42013,"cve_ids":["CVE-2026-84635"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","event_types":["advisory"],"published_at":"2026-10-25T11:38:07.48677+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:05.014+00:00","detail_url":"/events/42013"},"members":[{"id":42013,"cve_ids":["CVE-2026-84635"],"payload":{"kind":"advisory","title":"CVE-2026-84635","summary":"A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination.","evidence":"cve:CVE-2026-84635","products":[{"name":{"value":"Safari","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/5/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84635","aliases":["CVE-2026-84635"],"metrics":[],"affected":[{"vendor":"Apple","product":"Safari","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.989Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149039"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84635","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-16T19:33:36.934407Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T19:33:42.838Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.989Z"}}},"related_cves":[{"value":"CVE-2026-84635","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf4eac75-ae77-45d8-94dc-023edcef6079","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84635","advisory_id":"bf4eac75-ae77-45d8-94dc-023edcef6079","event_types":["advisory"],"published_at":"2026-10-25T11:38:07.48677+00:00","technologies":["core-cve","ios-and-ipados","macos","safari","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:05.014+00:00","detail_url":"/events/42013"}]}},{"id":42402,"cve_ids":["CVE-2026-84626"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","event_types":["advisory"],"published_at":"2026-10-25T11:38:06.24765+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:47.768+00:00","detail_url":"/advisories/advisory%3Ad6d83229-c415-4a55-a2ea-2a23a76a1ad5","group":{"id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","revision":1,"primary_event_id":42011,"change":"published","superseded_by":[],"changed":{"id":42011,"cve_ids":["CVE-2026-84626"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","event_types":["advisory"],"published_at":"2026-10-25T11:38:06.24765+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:47.768+00:00","detail_url":"/events/42011"},"members":[{"id":42011,"cve_ids":["CVE-2026-84626"],"payload":{"kind":"advisory","title":"CVE-2026-84626","summary":"An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed.","evidence":"cve:CVE-2026-84626","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84626","aliases":["CVE-2026-84626"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.937Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":3.3,"attackVector":"LOCAL","baseSeverity":"LOW","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84626","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T16:51:25.320452Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T16:51:27.790Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.937Z"}}},"related_cves":[{"value":"CVE-2026-84626","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d6d83229-c415-4a55-a2ea-2a23a76a1ad5","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84626","advisory_id":"d6d83229-c415-4a55-a2ea-2a23a76a1ad5","event_types":["advisory"],"published_at":"2026-10-25T11:38:06.24765+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:47.768+00:00","detail_url":"/events/42011"}]}},{"id":42401,"cve_ids":["CVE-2026-84630"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","event_types":["advisory"],"published_at":"2026-10-25T11:38:05.621275+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:54.789+00:00","detail_url":"/advisories/advisory%3A3dfbf03a-9ae1-422b-aff8-37d1c05498be","group":{"id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","revision":1,"primary_event_id":42010,"change":"published","superseded_by":[],"changed":{"id":42010,"cve_ids":["CVE-2026-84630"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","event_types":["advisory"],"published_at":"2026-10-25T11:38:05.621275+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:54.789+00:00","detail_url":"/events/42010"},"members":[{"id":42010,"cve_ids":["CVE-2026-84630"],"payload":{"kind":"advisory","title":"CVE-2026-84630","summary":"A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84630","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84630","aliases":["CVE-2026-84630"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:41.358Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.7,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84630","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T15:09:35.658568Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T15:09:39.611Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:41.358Z"}}},"related_cves":[{"value":"CVE-2026-84630","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:3dfbf03a-9ae1-422b-aff8-37d1c05498be","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84630","advisory_id":"3dfbf03a-9ae1-422b-aff8-37d1c05498be","event_types":["advisory"],"published_at":"2026-10-25T11:38:05.621275+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:54.789+00:00","detail_url":"/events/42010"}]}},{"id":42399,"cve_ids":["CVE-2026-84622"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","event_types":["advisory"],"published_at":"2026-10-25T11:38:04.402306+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:59.138+00:00","detail_url":"/advisories/advisory%3Ad8dca76d-1505-43a2-9dea-f4c06cf989f3","group":{"id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","revision":1,"primary_event_id":42008,"change":"published","superseded_by":[],"changed":{"id":42008,"cve_ids":["CVE-2026-84622"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","event_types":["advisory"],"published_at":"2026-10-25T11:38:04.402306+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:59.138+00:00","detail_url":"/events/42008"},"members":[{"id":42008,"cve_ids":["CVE-2026-84622"],"payload":{"kind":"advisory","title":"CVE-2026-84622","summary":"A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory.","evidence":"cve:CVE-2026-84622","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84622","aliases":["CVE-2026-84622"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:40.638Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.2,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84622","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:34:03.607539Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-908","description":"CWE-908 Use of Uninitialized Resource"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:34:13.554Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:40.638Z"}}},"related_cves":[{"value":"CVE-2026-84622","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:d8dca76d-1505-43a2-9dea-f4c06cf989f3","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84622","advisory_id":"d8dca76d-1505-43a2-9dea-f4c06cf989f3","event_types":["advisory"],"published_at":"2026-10-25T11:38:04.402306+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:59.138+00:00","detail_url":"/events/42008"}]}},{"id":42397,"cve_ids":["CVE-2026-84602"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","event_types":["advisory"],"published_at":"2026-10-25T11:38:03.141099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:25.038+00:00","detail_url":"/advisories/advisory%3Af6ffb922-b3b4-4a86-8203-c7803a7f60ff","group":{"id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","revision":1,"primary_event_id":42006,"change":"published","superseded_by":[],"changed":{"id":42006,"cve_ids":["CVE-2026-84602"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","event_types":["advisory"],"published_at":"2026-10-25T11:38:03.141099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:25.038+00:00","detail_url":"/events/42006"},"members":[{"id":42006,"cve_ids":["CVE-2026-84602"],"payload":{"kind":"advisory","title":"CVE-2026-84602","summary":"A type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination.","evidence":"cve:CVE-2026-84602","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84602","aliases":["CVE-2026-84602"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:39.254Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84602","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:37:48.061251Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:37:51.186Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:39.254Z"}}},"related_cves":[{"value":"CVE-2026-84602","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:f6ffb922-b3b4-4a86-8203-c7803a7f60ff","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84602","advisory_id":"f6ffb922-b3b4-4a86-8203-c7803a7f60ff","event_types":["advisory"],"published_at":"2026-10-25T11:38:03.141099+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:25.038+00:00","detail_url":"/events/42006"}]}},{"id":42396,"cve_ids":["CVE-2026-84600"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","event_types":["advisory"],"published_at":"2026-10-25T11:38:02.48258+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:55.958+00:00","detail_url":"/advisories/advisory%3A7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","group":{"id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","revision":1,"primary_event_id":42005,"change":"published","superseded_by":[],"changed":{"id":42005,"cve_ids":["CVE-2026-84600"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","event_types":["advisory"],"published_at":"2026-10-25T11:38:02.48258+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:55.958+00:00","detail_url":"/events/42005"},"members":[{"id":42005,"cve_ids":["CVE-2026-84600"],"payload":{"kind":"advisory","title":"CVE-2026-84600","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A malicious shortcut may be able to send messages without user confirmation.","evidence":"cve:CVE-2026-84600","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84600","aliases":["CVE-2026-84600"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:38.838Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84600","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T14:33:49.034335Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-285","description":"CWE-285 Improper Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T14:33:52.562Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:38.838Z"}}},"related_cves":[{"value":"CVE-2026-84600","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84600","advisory_id":"7f63d1a3-3c07-44ca-8d63-f7106a48c7a2","event_types":["advisory"],"published_at":"2026-10-25T11:38:02.48258+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:49:55.958+00:00","detail_url":"/events/42005"}]}},{"id":42392,"cve_ids":["CVE-2026-84582"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","event_types":["advisory"],"published_at":"2026-10-25T11:38:00.427406+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.797+00:00","detail_url":"/advisories/advisory%3Aff03536c-907d-4a23-9e01-9569a1e51943","group":{"id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","revision":1,"primary_event_id":42002,"change":"published","superseded_by":[],"changed":{"id":42002,"cve_ids":["CVE-2026-84582"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","event_types":["advisory"],"published_at":"2026-10-25T11:38:00.427406+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.797+00:00","detail_url":"/events/42002"},"members":[{"id":42002,"cve_ids":["CVE-2026-84582"],"payload":{"kind":"advisory","title":"CVE-2026-84582","summary":"A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.","evidence":"cve:CVE-2026-84582","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84582","aliases":["CVE-2026-84582"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:37.797Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:37.797Z"}}},"related_cves":[{"value":"CVE-2026-84582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:ff03536c-907d-4a23-9e01-9569a1e51943","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84582","advisory_id":"ff03536c-907d-4a23-9e01-9569a1e51943","event_types":["advisory"],"published_at":"2026-10-25T11:38:00.427406+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-20T00:50:37.797+00:00","detail_url":"/events/42002"}]}},{"id":42387,"cve_ids":["CVE-2026-84564"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","event_types":["advisory"],"published_at":"2026-10-25T11:37:57.232687+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:09.688+00:00","detail_url":"/advisories/advisory%3A885435bf-3c60-4455-a4e5-8efeaae37bf6","group":{"id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","revision":1,"primary_event_id":41997,"change":"published","superseded_by":[],"changed":{"id":41997,"cve_ids":["CVE-2026-84564"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","event_types":["advisory"],"published_at":"2026-10-25T11:37:57.232687+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:09.688+00:00","detail_url":"/events/41997"},"members":[{"id":41997,"cve_ids":["CVE-2026-84564"],"payload":{"kind":"advisory","title":"CVE-2026-84564","summary":"An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result in disclosure of process memory.","evidence":"cve:CVE-2026-84564","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84564","aliases":["CVE-2026-84564"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.398Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84564","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-17T15:12:39.284650Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-457","description":"CWE-457 Use of Uninitialized Variable"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-17T15:12:42.470Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.398Z"}}},"related_cves":[{"value":"CVE-2026-84564","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:885435bf-3c60-4455-a4e5-8efeaae37bf6","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84564","advisory_id":"885435bf-3c60-4455-a4e5-8efeaae37bf6","event_types":["advisory"],"published_at":"2026-10-25T11:37:57.232687+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:50:09.688+00:00","detail_url":"/events/41997"}]}},{"id":42386,"cve_ids":["CVE-2026-84560"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","event_types":["advisory"],"published_at":"2026-10-25T11:37:56.601292+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:15.829+00:00","detail_url":"/advisories/advisory%3A4c788f14-464f-4b64-be9b-5053aa6c3885","group":{"id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","revision":1,"primary_event_id":41996,"change":"published","superseded_by":[],"changed":{"id":41996,"cve_ids":["CVE-2026-84560"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","event_types":["advisory"],"published_at":"2026-10-25T11:37:56.601292+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:15.829+00:00","detail_url":"/events/41996"},"members":[{"id":41996,"cve_ids":["CVE-2026-84560"],"payload":{"kind":"advisory","title":"CVE-2026-84560","summary":"An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.","evidence":"cve:CVE-2026-84560","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84560","aliases":["CVE-2026-84560"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:34.647Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84560","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-15T16:57:34.437102Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-863","description":"CWE-863 Incorrect Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-15T16:57:47.608Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:34.647Z"}}},"related_cves":[{"value":"CVE-2026-84560","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:4c788f14-464f-4b64-be9b-5053aa6c3885","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84560","advisory_id":"4c788f14-464f-4b64-be9b-5053aa6c3885","event_types":["advisory"],"published_at":"2026-10-25T11:37:56.601292+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:47:15.829+00:00","detail_url":"/events/41996"}]}},{"id":42385,"cve_ids":["CVE-2026-84561"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","event_types":["advisory"],"published_at":"2026-10-25T11:37:55.984648+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:10.362+00:00","detail_url":"/advisories/advisory%3A55d8eb98-f416-40f1-b2ff-31ea21a516ec","group":{"id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","revision":1,"primary_event_id":41995,"change":"published","superseded_by":[],"changed":{"id":41995,"cve_ids":["CVE-2026-84561"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","event_types":["advisory"],"published_at":"2026-10-25T11:37:55.984648+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:10.362+00:00","detail_url":"/events/41995"},"members":[{"id":41995,"cve_ids":["CVE-2026-84561"],"payload":{"kind":"advisory","title":"CVE-2026-84561","summary":"A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","evidence":"cve:CVE-2026-84561","products":[{"name":{"value":"iOS and iPadOS","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"macOS","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"tvOS","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"visionOS","evidence":"/containers/cna/affected/3/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"watchOS","evidence":"/containers/cna/affected/4/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-84561","aliases":["CVE-2026-84561"],"metrics":[],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"status":"affected","version":"0","lessThan":"15.8","versionType":"custom"},{"status":"affected","version":"0","lessThan":"26.7","versionType":"custom"},{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"status":"affected","version":"0","lessThan":"27","versionType":"custom"}]}],"modified":"2026-10-20T00:50:35.120Z","provider":"cve","references":["https://support.apple.com/en-us/149034","https://support.apple.com/en-us/149035","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149041","https://support.apple.com/en-us/149042","https://support.apple.com/en-us/149043"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-84561","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-16T14:26:06.505033Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-415","description":"CWE-415 Double Free"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-16T14:26:17.072Z"}}],"cna":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-10-20T00:50:35.120Z"}}},"related_cves":[{"value":"CVE-2026-84561","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:55d8eb98-f416-40f1-b2ff-31ea21a516ec","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-84561","advisory_id":"55d8eb98-f416-40f1-b2ff-31ea21a516ec","event_types":["advisory"],"published_at":"2026-10-25T11:37:55.984648+00:00","technologies":["core-cve","ios-and-ipados","macos","tvos","visionos","watchos"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-14T20:48:10.362+00:00","detail_url":"/events/41995"}]}}],"next_after":46100,"next_before":42385}