Vulnerability details

CVE-2026-65414

Apple iOS and iPadOSApple macOSApple tvOSApple visionOSApple watchOS

CVSS 3.1

9.8Critical

Official description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

CVSS scores

Score	Version	Source	Vector
9.8Critical	3.1	CISA ADP / Vulnrichment (CISA-ADP)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Apple	iOS and iPadOS	v < 26.7	CVEProject cvelistV5 (CNA)
Apple	iOS and iPadOS	v < 27	CVEProject cvelistV5 (CNA)
Apple	macOS	v < 15.8	CVEProject cvelistV5 (CNA)
Apple	macOS	v < 26.7	CVEProject cvelistV5 (CNA)
Apple	macOS	v < 27	CVEProject cvelistV5 (CNA)
Apple	tvOS	v < 27	CVEProject cvelistV5 (CNA)
Apple	visionOS	v < 27	CVEProject cvelistV5 (CNA)
Apple	watchOS	v < 27	CVEProject cvelistV5 (CNA)

References and advisories

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-09-15
Last updated: 2026-10-27
State: Published
Assigner (CNA): apple

Exploit prediction (EPSS)

1.27%

Probability of exploitation in 30 days

70.1%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-787
Out-of-bounds Write