Aller au contenu
Appaloosa Scout
Sélection de la langue
fr en

iPadOS

iPadOS 26.7.2

Advisory officiel

iPadOS 26.7.2, publié le 2026-10-26, corrige 134 CVE. Les versions antérieures restent exposées à ces vulnérabilités.

Date de sortie
2026-10-26
Fin de support
—
CVE corrigées
134

130 en attente nvd

KEV CISA
0

CVE corrigées

CVE
CVE-2026-86971
MEDIUM 6.5

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112415
MEDIUM 6.5

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

CVE-2026-113907
MEDIUM 6.1

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

CVE-2026-28864
LOW 3.3

This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, iOS 26.7.2 and iPad…

CVE-2026-86992
N/A

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, m…

CVE-2026-86972
N/A

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate…

CVE-2026-86969
N/A

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golde…

CVE-2026-84493
N/A

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. A maliciou…

CVE-2026-113910
N/A

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

CVE-2026-113914
N/A

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may …

CVE-2026-113906
N/A

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker i…

CVE-2026-113898
N/A

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27…

CVE-2026-112701
N/A

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An app may …

CVE-2026-112705
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112706
N/A

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, tvOS 27.2, visio…

CVE-2026-112689
N/A

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS…

CVE-2026-112690
N/A

This issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2,…

CVE-2026-112678
N/A

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gat…

CVE-2026-112638
N/A

A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

CVE-2026-112610
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112611
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112612
N/A

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker with p…

CVE-2026-112566
N/A

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

CVE-2026-112546
N/A

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden …

CVE-2026-112469
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112470
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112466
N/A

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden…

CVE-2026-112468
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2026-112416
N/A

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS …

CVE-2019-5598
N/A

[Apple Kernel] A remote attacker may be able to bypass firewall rules

CVE-2026-112413
N/A

[Apple Model I/O] Processing a maliciously crafted file may lead to unexpected app termination

CVE-2026-112414
N/A

[Apple Mail] Processing a maliciously crafted message may lead to a denial-of-service

CVE-2026-112423
N/A

[Apple SceneKit] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

CVE-2026-112425
N/A

[Apple SceneKit] Processing a 3D model may result in disclosure of process memory

CVE-2026-112449
N/A

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

CVE-2026-112455
N/A

[Apple Shortcuts] An app may be able to access sensitive user data

CVE-2026-112456
N/A

[Apple HFS] Processing a maliciously crafted file may lead to heap corruption

CVE-2026-112461
N/A

[Apple Model I/O] Processing a maliciously crafted 3D model may lead to memory corruption

CVE-2026-112464
N/A

[Apple SceneKit] Processing a maliciously crafted file may lead to heap corruption

CVE-2026-112476
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112477
N/A

[Apple IOSurface] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112479
N/A

[Apple USB] A malicious USB device may be able to cause unexpected system termination or read kernel memory

CVE-2026-112486
N/A

[Apple Model I/O] Processing a 3D model may lead to unexpected app termination

CVE-2026-112488
N/A

[Apple ImageIO] Processing a maliciously crafted image may corrupt process memory

CVE-2026-112491
N/A

[Apple RealityKit] Processing a maliciously crafted file may lead to unexpected app termination

CVE-2026-112501
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112514
N/A

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112515
N/A

[Apple IOHIDFamily] An attacker may be able to cause unexpected system termination or read kernel memory

CVE-2026-112516
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112517
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-112522
N/A

[Apple libarchive] Processing a maliciously crafted file may lead to unexpected app termination

CVE-2026-112554
N/A

[Apple IOStorageFamily] An app may be able to cause unexpected system termination or read kernel memory

CVE-2026-112559
N/A

[Apple Shortcuts] An app may be able to access sensitive user data

CVE-2026-112560
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112561
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112571
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112576
N/A

[Apple Kernel] An app may be able to cause unexpected changes to copy-on-write memory

CVE-2026-112606
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112614
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112615
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112621
N/A

[Apple LinkPresentation] Processing a maliciously crafted image may result in memory corruption

CVE-2026-112622
N/A

[Apple Wi-Fi] An attacker in radio range may be able to cause unexpected system termination

CVE-2026-112623
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112624
N/A

[Apple Kernel] An app may be able to bypass Privacy preferences

CVE-2026-112625
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption

CVE-2026-112626
N/A

[Apple WebKit JavaScript Bindings] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112627
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112628
N/A

[Apple Spotlight] An app may be able to access sensitive user data

CVE-2026-112629
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112630
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112632
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in disclosure of process memory

CVE-2026-112633
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112634
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-112639
N/A

[Apple WebKit Process Model] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112640
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

CVE-2026-112642
N/A

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

CVE-2026-112646
N/A

[Apple SpringBoard] An app may be able to cause unexpected system termination or corrupt process memory

CVE-2026-112651
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112652
N/A

[Apple Security] An malicious app may be able to bypass certificate validation

CVE-2026-112653
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112654
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112655
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112656
N/A

[Apple CoreText] Processing a maliciously crafted font may result in the disclosure of process memory

CVE-2026-112659
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112660
N/A

[Apple Photos Storage] An app may be able to bypass certain Privacy preferences

CVE-2026-112665
N/A

[Apple Kernel] An app may be able to determine kernel memory layout

CVE-2026-112671
N/A

[Apple Mail] A remote attacker may be able to cause a denial-of-service

CVE-2026-112673
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112676
N/A

[Apple Photos Storage] An app may be able to access a user's Photos Library

CVE-2026-112680
N/A

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

CVE-2026-112681
N/A

[Apple Power Management] An app may be able to fingerprint the user

CVE-2026-112682
N/A

[Apple Messages] A remote attacker may be able to cause unexpected app termination

CVE-2026-112683
N/A

[Apple FontParser] Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory

CVE-2026-112684
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-112686
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112691
N/A

[Apple SwiftUI] An app may be able to cause unexpected system termination

CVE-2026-112693
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

CVE-2026-112695
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process termination

CVE-2026-112697
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to arbitrary code execution

CVE-2026-112698
N/A

[Apple Kernel] An app may be able to cause unexpected system termination

CVE-2026-112699
N/A

[Apple WebKit] Processing maliciously crafted web content may result in the disclosure of process memory

CVE-2026-112707
N/A

[Apple Maps] An app may be able to identify what other apps a user has installed

CVE-2026-113896
N/A

[Apple FileProvider] An app may be able to access sensitive user data

CVE-2026-113904
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-113909
N/A

[Apple Wi-Fi] An attacker in physical proximity may be able to corrupt process memory

CVE-2026-113913
N/A

[Apple Security] Processing web content may disclose sensitive information

CVE-2026-113915
N/A

[Apple MediaAnalysis] An app may be able to access sensitive user data

CVE-2026-113949
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

CVE-2026-113952
N/A

[Apple WebKit] A website may be able to use a media format that should be restricted in Lockdown Mode

CVE-2026-64750
N/A

[Apple ImageIO] Processing a maliciously crafted image may result in memory corruption

CVE-2026-64759
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to arbitrary code execution

CVE-2026-65350
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-65363
N/A

[Apple Security] An app may be able to break out of its sandbox

CVE-2026-65385
N/A

[Apple IOKit] A buffer overflow may result in memory corruption and unexpected app termination

CVE-2026-65397
N/A

[Apple Photos Storage] An app may be able to access sensitive user data

CVE-2026-84495
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or write kernel memory

CVE-2026-84594
N/A

[Apple UIKit] An app may be able to access sensitive user data

CVE-2026-84599
N/A

[Apple Kernel] An app may be able to cause unexpected system termination or corrupt kernel memory

CVE-2026-84605
N/A

[Apple TextKit] An app may be able to read the device's name

CVE-2026-84614
N/A

[Apple Siri] An attacker with physical access may be able to access contacts from the lock screen

CVE-2026-84627
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to heap corruption

CVE-2026-86880
N/A

[Apple MediaRemote] An app may be able to access sensitive user data

CVE-2026-86920
N/A

[Apple Apple Intelligence] An app may be able to access sensitive user data

CVE-2026-86942
N/A

[Apple Heimdal] An app may be able to cause a denial-of-service

CVE-2026-86954
N/A

[Apple ImageIO] Processing a maliciously crafted image may lead to unexpected app termination

CVE-2026-86966
N/A

[Apple copyfile] An app may be able to modify protected parts of the file system

CVE-2026-86970
N/A

[Apple FontParser] Processing a maliciously crafted font may result in the disclosure of process memory

CVE-2026-86973
N/A

[Apple WebRTC] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-86974
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to memory corruption

CVE-2026-86985
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

CVE-2026-86986
N/A

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

CVE-2026-86989
N/A

[Apple MobileGestalt] An app may be able to fingerprint the user

CVE-2026-86990
N/A

[Apple CoreMedia] A malicious app may be able to access the camera without user permission

CVE-2026-86991
N/A

[Apple SceneKit] Processing a maliciously crafted file may lead to unexpected process termination

Piloter cette mise à jour iOS sur votre flotte

Appaloosa orchestre les mises à jour iOS et l'inventaire des apps de votre parc.

En savoir plus sur cette version, sur le blog Appaloosa
Gérer iOS avec Appaloosa