iPadOS
iPadOS 26.7.2
Advisory officieliPadOS 26.7.2, publié le 2026-10-26, corrige 134 CVE. Les versions antérieures restent exposées à ces vulnérabilités.
- Date de sortie
- 2026-10-26
- Fin de support
- —
- CVE corrigées
- 134
- KEV CISA
- 0
130 en attente nvd
CVE corrigées
| CVE |
|---|
|
CVE-2026-86971
MEDIUM 6.5
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112415
MEDIUM 6.5
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde… |
|
CVE-2026-113907
MEDIUM 6.1
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde… |
|
CVE-2026-28864
LOW 3.3
This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPad… |
|
CVE-2026-86992
N/A
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, m… |
|
CVE-2026-86972
N/A
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate… |
|
CVE-2026-86969
N/A
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde… |
|
CVE-2026-84493
N/A
An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A maliciou… |
|
CVE-2026-113910
N/A
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS… |
|
CVE-2026-113914
N/A
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may … |
|
CVE-2026-113906
N/A
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker i… |
|
CVE-2026-113898
N/A
A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27… |
|
CVE-2026-112701
N/A
An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may … |
|
CVE-2026-112705
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112706
N/A
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visio… |
|
CVE-2026-112689
N/A
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS… |
|
CVE-2026-112690
N/A
This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,… |
|
CVE-2026-112678
N/A
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gat… |
|
CVE-2026-112638
N/A
A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden… |
|
CVE-2026-112610
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112611
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112612
N/A
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with p… |
|
CVE-2026-112566
N/A
A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden … |
|
CVE-2026-112546
N/A
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden … |
|
CVE-2026-112469
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112470
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112466
N/A
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden… |
|
CVE-2026-112468
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2026-112416
N/A
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS … |
|
CVE-2019-5598
N/A
[Apple Kernel] A remote attacker may be able to bypass firewall rules |
|
CVE-2026-112413
N/A
[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination |
|
CVE-2026-112414
N/A
[Apple Mail] Processing a maliciously crafted message may lead to a denial-of-service |
|
CVE-2026-112423
N/A
[Apple SceneKit] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents |
|
CVE-2026-112425
N/A
[Apple SceneKit] Processing a 3D model may result in disclosure of process memory |
|
CVE-2026-112449
N/A
[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption |
|
CVE-2026-112455
N/A
[Apple Shortcuts] An app may be able to access sensitive user data |
|
CVE-2026-112456
N/A
[Apple HFS] Processing a maliciously crafted file may lead to heap corruption |
|
CVE-2026-112461
N/A
[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption |
|
CVE-2026-112464
N/A
[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption |
|
CVE-2026-112476
N/A
[Apple Kernel] An app may be able to cause unexpected system termination |
|
CVE-2026-112477
N/A
[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory |
|
CVE-2026-112479
N/A
[Apple USB] A malicious USB device may be able to cause unexpected system termination or read kernel memory |
|
CVE-2026-112486
N/A
[Apple Model I/O] Processing a 3D model may lead to unexpected app termination |
|
CVE-2026-112488
N/A
[Apple ImageIO] Processing a maliciously crafted image may corrupt process memory |
|
CVE-2026-112491
N/A
[Apple RealityKit] Processing a maliciously crafted file may lead to unexpected app termination |
|
CVE-2026-112501
N/A
[Apple Kernel] An app may be able to cause unexpected system termination |
|
CVE-2026-112514
N/A
[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory |
|
CVE-2026-112515
N/A
[Apple IOHIDFamily] An attacker may be able to cause unexpected system termination or read kernel memory |
|
CVE-2026-112516
N/A
[Apple Kernel] An app may be able to cause unexpected system termination |
|
CVE-2026-112517
N/A
[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory |
|
CVE-2026-112522
N/A
[Apple libarchive] Processing a maliciously crafted file may lead to unexpected app termination |
|
CVE-2026-112554
N/A
[Apple IOStorageFamily] An app may be able to cause unexpected system termination or read kernel memory |
|
CVE-2026-112559
N/A
[Apple Shortcuts] An app may be able to access sensitive user data |
|
CVE-2026-112560
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory |
|
CVE-2026-112561
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory |
|
CVE-2026-112571
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory |
|
CVE-2026-112576
N/A
[Apple Kernel] An app may be able to cause unexpected changes to copy-on-write memory |
|
CVE-2026-112606
N/A
[Apple Kernel] An app may be able to cause unexpected system termination |
|
CVE-2026-112614
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination |
|
CVE-2026-112615
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination |
|
CVE-2026-112621
N/A
[Apple LinkPresentation] Processing a maliciously crafted image may result in memory corruption |
|
CVE-2026-112622
N/A
[Apple Wi-Fi] An attacker in radio range may be able to cause unexpected system termination |
|
CVE-2026-112623
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112624
N/A
[Apple Kernel] An app may be able to bypass Privacy preferences |
|
CVE-2026-112625
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption |
|
CVE-2026-112626
N/A
[Apple WebKit JavaScript Bindings] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112627
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory |
|
CVE-2026-112628
N/A
[Apple Spotlight] An app may be able to access sensitive user data |
|
CVE-2026-112629
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination |
|
CVE-2026-112630
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory |
|
CVE-2026-112632
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory |
|
CVE-2026-112633
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination |
|
CVE-2026-112634
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination |
|
CVE-2026-112639
N/A
[Apple WebKit Process Model] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112640
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption |
|
CVE-2026-112642
N/A
[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory |
|
CVE-2026-112646
N/A
[Apple SpringBoard] An app may be able to cause unexpected system termination or corrupt process memory |
|
CVE-2026-112651
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112652
N/A
[Apple Security] An malicious app may be able to bypass certificate validation |
|
CVE-2026-112653
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination |
|
CVE-2026-112654
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination |
|
CVE-2026-112655
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112656
N/A
[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory |
|
CVE-2026-112659
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112660
N/A
[Apple Photos Storage] An app may be able to bypass certain Privacy preferences |
|
CVE-2026-112665
N/A
[Apple Kernel] An app may be able to determine kernel memory layout |
|
CVE-2026-112671
N/A
[Apple Mail] A remote attacker may be able to cause a denial-of-service |
|
CVE-2026-112673
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination |
|
CVE-2026-112676
N/A
[Apple Photos Storage] An app may be able to access a user's Photos Library |
|
CVE-2026-112680
N/A
[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory |
|
CVE-2026-112681
N/A
[Apple Power Management] An app may be able to fingerprint the user |
|
CVE-2026-112682
N/A
[Apple Messages] A remote attacker may be able to cause unexpected app termination |
|
CVE-2026-112683
N/A
[Apple FontParser] Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory |
|
CVE-2026-112684
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash |
|
CVE-2026-112686
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination |
|
CVE-2026-112691
N/A
[Apple SwiftUI] An app may be able to cause unexpected system termination |
|
CVE-2026-112693
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash |
|
CVE-2026-112695
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination |
|
CVE-2026-112697
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution |
|
CVE-2026-112698
N/A
[Apple Kernel] An app may be able to cause unexpected system termination |
|
CVE-2026-112699
N/A
[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory |
|
CVE-2026-112707
N/A
[Apple Maps] An app may be able to identify what other apps a user has installed |
|
CVE-2026-113896
N/A
[Apple FileProvider] An app may be able to access sensitive user data |
|
CVE-2026-113904
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash |
|
CVE-2026-113909
N/A
[Apple Wi-Fi] An attacker in physical proximity may be able to corrupt process memory |
|
CVE-2026-113913
N/A
[Apple Security] Processing web content may disclose sensitive information |
|
CVE-2026-113915
N/A
[Apple MediaAnalysis] An app may be able to access sensitive user data |
|
CVE-2026-113949
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption |
|
CVE-2026-113952
N/A
[Apple WebKit] A website may be able to use a media format that should be restricted in Lockdown Mode |
|
CVE-2026-64750
N/A
[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption |
|
CVE-2026-64759
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to arbitrary code execution |
|
CVE-2026-65350
N/A
[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory |
|
CVE-2026-65363
N/A
[Apple Security] An app may be able to break out of its sandbox |
|
CVE-2026-65385
N/A
[Apple IOKit] A buffer overflow may result in memory corruption and unexpected app termination |
|
CVE-2026-65397
N/A
[Apple Photos Storage] An app may be able to access sensitive user data |
|
CVE-2026-84495
N/A
[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory |
|
CVE-2026-84594
N/A
[Apple UIKit] An app may be able to access sensitive user data |
|
CVE-2026-84599
N/A
[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory |
|
CVE-2026-84605
N/A
[Apple TextKit] An app may be able to read the device's name |
|
CVE-2026-84614
N/A
[Apple Siri] An attacker with physical access may be able to access contacts from the lock screen |
|
CVE-2026-84627
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to heap corruption |
|
CVE-2026-86880
N/A
[Apple MediaRemote] An app may be able to access sensitive user data |
|
CVE-2026-86920
N/A
[Apple Apple Intelligence] An app may be able to access sensitive user data |
|
CVE-2026-86942
N/A
[Apple Heimdal] An app may be able to cause a denial-of-service |
|
CVE-2026-86954
N/A
[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination |
|
CVE-2026-86966
N/A
[Apple copyfile] An app may be able to modify protected parts of the file system |
|
CVE-2026-86970
N/A
[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory |
|
CVE-2026-86973
N/A
[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash |
|
CVE-2026-86974
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption |
|
CVE-2026-86985
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash |
|
CVE-2026-86986
N/A
[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash |
|
CVE-2026-86989
N/A
[Apple MobileGestalt] An app may be able to fingerprint the user |
|
CVE-2026-86990
N/A
[Apple CoreMedia] A malicious app may be able to access the camera without user permission |
|
CVE-2026-86991
N/A
[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected process termination |
Piloter cette mise à jour iOS sur votre flotte
Appaloosa orchestre les mises à jour iOS et l'inventaire des apps de votre parc.
En savoir plus sur cette version, sur le blog Appaloosa