Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

iOS

iOS 27.2, publié le 2026-10-26, corrige 163 CVE. Les versions antérieures restent exposées à ces vulnérabilités.

Date de sortie
2026-10-26
Fin de support
—
CVE corrigées
163

1 élevé · 159 en attente nvd

KEV CISA
0

CVE corrigées

CVE
CVE-2026-112688
HIGH 8.8

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden …

CVE-2026-86971
MEDIUM 6.5

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112415
MEDIUM 6.5

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

CVE-2026-113907
MEDIUM 6.1

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

CVE-2026-86992
N/A

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, m…

CVE-2026-86987
N/A

An authorization issue was addressed with improved entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. A remote attacker may be able to access…

CVE-2026-86988
N/A

The issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. …

CVE-2026-86972
N/A

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…

CVE-2026-86969
N/A

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

CVE-2026-84494
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.…

CVE-2026-84493
N/A

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A maliciou…

CVE-2026-113950
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, v…

CVE-2026-113910
N/A

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

CVE-2026-113912
N/A

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Gol…

CVE-2026-113914
N/A

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may …

CVE-2026-113906
N/A

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker i…

CVE-2026-113908
N/A

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.

CVE-2026-113898
N/A

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27…

CVE-2026-112701
N/A

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may …

CVE-2026-112705
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112706
N/A

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visio…

CVE-2026-112696
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoi…

CVE-2026-112689
N/A

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

CVE-2026-112690
N/A

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…

CVE-2026-112692
N/A

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An app ma…

CVE-2026-112678
N/A

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gat…

CVE-2026-112638
N/A

A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

CVE-2026-112619
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.…

CVE-2026-112610
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112611
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112612
N/A

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with p…

CVE-2026-112566
N/A

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

CVE-2026-112546
N/A

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

CVE-2026-112469
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112470
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112466
N/A

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

CVE-2026-112468
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112454
N/A

The issue was addressed with improved memory handling. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watch…

CVE-2026-112446
N/A

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27, macOS Golden Gate 27.2, mac…

CVE-2026-112416
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2022-26704
N/A

[Apple Spotlight] An app may be able to gain elevated privileges

CVE-2026-112413
N/A

[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination

CVE-2026-112414
N/A

[Apple Mail] Processing a maliciously crafted message may lead to a denial-of-service

CVE-2026-112423
N/A

[Apple SceneKit] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

CVE-2026-112425
N/A

[Apple SceneKit] Processing a 3D model may result in disclosure of process memory

CVE-2026-112432
N/A

[Apple FontParser] An app may be able to access sensitive user data

CVE-2026-112449
N/A

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

CVE-2026-112455
N/A

[Apple Shortcuts] An app may be able to access sensitive user data

CVE-2026-112456
N/A

[Apple HFS] Processing a maliciously crafted file may lead to heap corruption

CVE-2026-112459
N/A

[Apple IOMobileFrameBuffer] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112461
N/A

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

CVE-2026-112464
N/A

[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption

CVE-2026-112474
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

CVE-2026-112476
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112477
N/A

[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112479
N/A

[Apple USB] A malicious USB device may be able to cause unexpected system termination or read kernel memory

CVE-2026-112485
N/A

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

CVE-2026-112486
N/A

[Apple Model I/O] Processing a 3D model may lead to unexpected app termination

CVE-2026-112488
N/A

[Apple ImageIO] Processing a maliciously crafted image may corrupt process memory

CVE-2026-112491
N/A

[Apple RealityKit] Processing a maliciously crafted file may lead to unexpected app termination

CVE-2026-112500
N/A

[Apple Mail] The user's original email address may be leaked when using the Hide My Email feature

CVE-2026-112501
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112507
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

CVE-2026-112514
N/A

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112515
N/A

[Apple IOHIDFamily] An attacker may be able to cause unexpected system termination or read kernel memory

CVE-2026-112516
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112517
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112518
N/A

[Apple Heimdal] An attacker in a privileged network position may be able to impersonate a Kerberos KDC

CVE-2026-112522
N/A

[Apple libarchive] Processing a maliciously crafted file may lead to unexpected app termination

CVE-2026-112547
N/A

[Apple ReplayKit] An app may be able to access sensitive user data

CVE-2026-112554
N/A

[Apple IOStorageFamily] An app may be able to cause unexpected system termination or read kernel memory

CVE-2026-112559
N/A

[Apple Shortcuts] An app may be able to access sensitive user data

CVE-2026-112561
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112565
N/A

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

CVE-2026-112567
N/A

[Apple Spotlight] A malicious application may be able to bypass Privacy preferences

CVE-2026-112571
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112576
N/A

[Apple Kernel] An app may be able to cause unexpected changes to copy-on-write memory

CVE-2026-112595
N/A

[Apple Thread] An attacker in physical proximity may be able to craft malicious network traffic to gain access to a Thread network

CVE-2026-112596
N/A

[Apple HomeKit] Processing a maliciously crafted video file may lead to unexpected system termination

CVE-2026-112599
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-112606
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112607
N/A

[Apple mDNSResponder] A remote attacker may be able to leak memory

CVE-2026-112609
N/A

[Apple Safety Check] An app may be able to access sensitive user data

CVE-2026-112614
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112615
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112616
N/A

[Apple Screen Time] An app may be able to access sensitive user data

CVE-2026-112618
N/A

[Apple Files] An app may be able to access sensitive user data

CVE-2026-112620
N/A

[Apple Wi-Fi] An attacker in a privileged network position may be able to cause a denial-of-service

CVE-2026-112621
N/A

[Apple LinkPresentation] Processing a maliciously crafted image may result in memory corruption

CVE-2026-112622
N/A

[Apple Wi-Fi] An attacker in radio range may be able to cause unexpected system termination

CVE-2026-112623
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112624
N/A

[Apple Kernel] An app may be able to bypass Privacy preferences

CVE-2026-112625
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption

CVE-2026-112626
N/A

[Apple WebKit JavaScript Bindings] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112627
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112628
N/A

[Apple Spotlight] An app may be able to access sensitive user data

CVE-2026-112629
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112630
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112632
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112633
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112634
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112637
N/A

[Apple WebKit Canvas] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112639
N/A

[Apple WebKit Process Model] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112640
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

CVE-2026-112642
N/A

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

CVE-2026-112646
N/A

[Apple SpringBoard] An app may be able to cause unexpected system termination or corrupt process memory

CVE-2026-112651
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112652
N/A

[Apple Security] An malicious app may be able to bypass certificate validation

CVE-2026-112653
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112654
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112655
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112656
N/A

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

CVE-2026-112658
N/A

[Apple Siri] An app may be able to access sensitive user data

CVE-2026-112659
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112660
N/A

[Apple Photos Storage] An app may be able to bypass certain Privacy preferences

CVE-2026-112665
N/A

[Apple Kernel] An app may be able to determine kernel memory layout

CVE-2026-112666
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112669
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

CVE-2026-112671
N/A

[Apple Mail] A remote attacker may be able to cause a denial-of-service

CVE-2026-112673
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112676
N/A

[Apple Photos Storage] An app may be able to access a user's Photos Library

CVE-2026-112679
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112680
N/A

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

CVE-2026-112681
N/A

[Apple Power Management] An app may be able to fingerprint the user

CVE-2026-112682
N/A

[Apple Messages] A remote attacker may be able to cause unexpected app termination

CVE-2026-112683
N/A

[Apple FontParser] Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

CVE-2026-112684
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-112685
N/A

[Apple Siri] An app may be able to access sensitive user data

CVE-2026-112686
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112687
N/A

[Apple MediaRemote] An attacker on the local network may be able to cause unexpected system termination or corrupt process memory

CVE-2026-112691
N/A

[Apple SwiftUI] An app may be able to cause unexpected system termination

CVE-2026-112693
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

CVE-2026-112695
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112697
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112698
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112699
N/A

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

CVE-2026-112707
N/A

[Apple Maps] An app may be able to identify what other apps a user has installed

CVE-2026-113896
N/A

[Apple FileProvider] An app may be able to access sensitive user data

CVE-2026-113897
N/A

[Apple WebKit Process Model] A remote attacker may be able to break out of Web Content sandbox

CVE-2026-113901
N/A

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-113903
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to unexpected memory modification

CVE-2026-113904
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-113909
N/A

[Apple Wi-Fi] An attacker in physical proximity may be able to corrupt process memory

CVE-2026-113913
N/A

[Apple Security] Processing web content may disclose sensitive information

CVE-2026-113915
N/A

[Apple MediaAnalysis] An app may be able to access sensitive user data

CVE-2026-113949
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

CVE-2026-113952
N/A

[Apple WebKit] A website may be able to use a media format that should be restricted in Lockdown Mode

CVE-2026-65350
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-65385
N/A

[Apple IOKit] A buffer overflow may result in memory corruption and unexpected app termination

CVE-2026-65397
N/A

[Apple Photos Storage] An app may be able to access sensitive user data

CVE-2026-84495
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

CVE-2026-84605
N/A

[Apple TextKit] An app may be able to read the device's name

CVE-2026-86925
N/A

[Apple Quick Look] An app may be able to access sensitive user data

CVE-2026-86968
N/A

[Apple System Preferences] A malicious app may be able to access restricted system interfaces or launder launch attribution

CVE-2026-86970
N/A

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

CVE-2026-86973
N/A

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-86974
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

CVE-2026-86978
N/A

[Apple HomeKit] An app may be able to access sensitive user data

CVE-2026-86985
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-86986
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

CVE-2026-86989
N/A

[Apple MobileGestalt] An app may be able to fingerprint the user

CVE-2026-86990
N/A

[Apple CoreMedia] A malicious app may be able to access the camera without user permission

CVE-2026-86991
N/A

[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected process termination

Piloter cette mise à jour iOS sur votre flotte

Appaloosa orchestre les mises à jour iOS et l'inventaire des apps de votre parc.

En savoir plus sur cette version, sur le blog Appaloosa
Gérer iOS avec Appaloosa