- Description
- A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges.
- Source
- product-security@apple.com
- NVD status
- Analyzed
- Products
- ipados, iphone_os, macos, visionos
CVSS 3.1
- Type
- Secondary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-862
- Hype score
- Not currently trending
@Apple ships iOS 27 and iPadOS 27, resolving 126 CVEs. Kernel fixes address 20 issues including memory corruption and root privilege escalation via CVE-2026-43689. Bluetooth CVE-2026-65414, WebKit, AVEVideoEncoder and CoreMedia also received patches. iOS 26.7 and iPadOS 26.7
@WorldCyberNewsX
17 Sept 2026
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Apple อุดช่องโหว่ 126 จุดใน iOS 27 และ iPadOS 27 มีหลายตัวที่อ่านแล้วรู้สึกว่า เออ อัปเดตความปลอดภัยมันสำคัญจริง ๆ เ
@brandnewnox
16 Sept 2026
2362 Impressions
6 Retweets
9 Likes
2 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0896A319-539F-45D2-ACA1-7225AE5C06ED",
"versionEndExcluding": "26.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B331E4FC-727F-403B-8689-E647A51204FD",
"versionEndExcluding": "26.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7FD79C64-A33E-4DDB-BDE6-4E272788FF66",
"versionEndExcluding": "27.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6F43E9DC-5D72-4325-9965-E6B50054B8E8",
"versionEndExcluding": "27.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]