Multiple Vulnerabilities in Apple Products

CERT-In Advisory CIAD-2026-0056

Multiple Vulnerabilities in Apple Products

Original Issue Date: October 27, 2026

Severity Rating: High

Software Affected

Safari versions prior to 27.2 MacOS Sequoia versions prior to 15.8.2 MacOS Tahoe versions prior to 26.7.2 MacOS Golden Gate versions prior to 27.2 iOS versions prior to 18.7.11 and iPadOS versions prior to 18.7.11 iOS versions prior to 26.7.2 and iPadOS versions prior to 26.7.2 iOS versions prior to 27.2 and iPadOS versions prior to 27.2 WatchOS versions prior to 27.2 TvOS versions prior to 27.2 VisionOS versions prior to 27.2

Overview

Multiple vulnerabilities have been reported in Apple products, which could allow an attacker to execute arbitrary code, escalate privileges, disclose sensitive information, bypass security restrictions or cause denial-of-service conditions on the targeted system.

Target Audience: All end-user organizations and individuals using Apple Products.

Risk Assessment: High risk of security restriction bypass, remote code execution, privilege escalation, sensitive information disclosure, denial-of-service.

Impact Assessment: Potential for remote code execution, privilege escalation, security restriction bypass, information disclosure or denial-of-service.

Description

Multiple vulnerabilities exist in Apple products due to memory corruption, out-of-bounds read/write, use-after-free, buffer overflow, race conditions, type confusion, integer overflow, improper input validation and authorization issues across various system components, including WebKit, Kernel and media-processing frameworks. An attacker could exploit these vulnerabilities by processing maliciously crafted web content, files, images, audio, video or fonts, or through other vulnerable application and system components, to execute arbitrary code, access sensitive information, bypass security and privacy controls, corrupt memory or cause system crashes on the targeted system.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, gain elevated privileges, access or modify sensitive information, compromise system integrity, bypass security mechanisms or cause denial of service on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor: https://support.apple.com/en-us/149230 https://support.apple.com/en-us/149227 https://support.apple.com/en-us/149225 https://support.apple.com/en-us/149521 https://support.apple.com/en-us/149522 https://support.apple.com/en-us/149523 https://support.apple.com/en-us/149524 https://support.apple.com/en-us/149525 https://support.apple.com/en-us/149526 https://support.apple.com/en-us/149527

Vendor Information

Apple https://support.apple.com/en-us/149230 https://support.apple.com/en-us/149227 https://support.apple.com/en-us/149225 https://support.apple.com/en-us/149521 https://support.apple.com/en-us/149522 https://support.apple.com/en-us/149523 https://support.apple.com/en-us/149524 https://support.apple.com/en-us/149525 https://support.apple.com/en-us/149526 https://support.apple.com/en-us/149527

CVE Name

CVE-2022-26704 CVE-2026-20648 CVE-2019-5598 CVE-2026-20649 CVE-2026-28864 CVE-2026-28991 CVE-2026-43736 CVE-2026-64750 CVE-2026-64759 CVE-2026-64767 CVE-2026-64789 CVE-2026-65327 CVE-2026-65339 CVE-2026-65350 CVE-2026-65363 CVE-2026-65368 CVE-2026-65373 CVE-2026-65384 CVE-2026-65385 CVE-2026-65392 CVE-2026-65397 CVE-2026-84493 CVE-2026-84494 CVE-2026-84495 CVE-2026-84496 CVE-2026-84498 CVE-2026-84528 CVE-2026-84539 CVE-2026-84542 CVE-2026-84545 CVE-2026-84590 CVE-2026-84594 CVE-2026-84595 CVE-2026-84599 CVE-2026-84604 CVE-2026-84605 CVE-2026-84610 CVE-2026-84614 CVE-2026-84627 CVE-2026-86880 CVE-2026-86896 CVE-2026-86916 CVE-2026-86920 CVE-2026-86923 CVE-2026-86925 CVE-2026-86929 CVE-2026-86931 CVE-2026-86936 CVE-2026-86937 CVE-2026-86939 CVE-2026-86941 CVE-2026-86942 CVE-2026-86943 CVE-2026-86945 CVE-2026-86946 CVE-2026-86950 CVE-2026-86954 CVE-2026-86958 CVE-2026-86964 CVE-2026-86966 CVE-2026-86968 CVE-2026-86969 CVE-2026-86970 CVE-2026-86971 CVE-2026-86972 CVE-2026-86973 CVE-2026-86974 CVE-2026-86978 CVE-2026-86984 CVE-2026-86985 CVE-2026-86987 CVE-2026-86988 CVE-2026-86990 CVE-2026-86991 CVE-2026-86992 CVE-2026-112410 CVE-2026-112414 CVE-2026-112416 CVE-2026-112421 CVE-2026-112424 CVE-2026-112427 CVE-2026-112429 CVE-2026-112432 CVE-2026-112434 CVE-2026-112438 CVE-2026-112441 CVE-2026-112443 CVE-2026-112446 CVE-2026-112449 CVE-2026-112453 CVE-2026-112455 CVE-2026-112457 CVE-2026-112461 CVE-2026-112464 CVE-2026-112467 CVE-2026-112469 CVE-2026-112471 CVE-2026-112474 CVE-2026-112476 CVE-2026-112478 CVE-2026-112480 CVE-2026-112482 CVE-2026-112484 CVE-2026-112486 CVE-2026-112488 CVE-2026-112492 CVE-2026-112494 CVE-2026-112497 CVE-2026-112498 CVE-2026-112501 CVE-2026-112504 CVE-2026-112506 CVE-2026-112508 CVE-2026-112511 CVE-2026-112513 CVE-2026-112515 CVE-2026-112517 CVE-2026-112521 CVE-2026-112524 CVE-2026-112529 CVE-2026-112532 CVE-2026-112535 CVE-2026-112537 CVE-2026-112540 CVE-2026-112543 CVE-2026-112546 CVE-2026-112550 CVE-2026-112553 CVE-2026-112556 CVE-2026-112560 CVE-2026-112563 CVE-2026-112568 CVE-2026-112576 CVE-2026-112595 CVE-2026-112604 CVE-2026-112609 CVE-2026-112610 CVE-2026-112614 CVE-2026-112617 CVE-2026-112620 CVE-2026-112624 CVE-2026-112628 CVE-2026-112632 CVE-2026-112638 CVE-2026-112642 CVE-2026-112651 CVE-2026-112655 CVE-2026-112659 CVE-2026-112660 CVE-2026-112668 CVE-2026-112670 CVE-2026-112675 CVE-2026-112678 CVE-2026-112682 CVE-2026-112685 CVE-2026-112688 CVE-2026-112695 CVE-2026-112701 CVE-2026-112706 CVE-2026-113896 CVE-2026-113898 CVE-2026-113901 CVE-2026-113906 CVE-2026-113910 CVE-2026-113914 CVE-2026-113934 CVE-2026-113936 CVE-2026-113938 CVE-2026-113940 CVE-2026-113941 CVE-2026-113942 CVE-2026-113943 CVE-2026-113944 CVE-2026-113945 CVE-2026-113946 CVE-2026-113947 CVE-2026-113948 CVE-2026-113949 CVE-2026-113950 CVE-2026-113952