visionOS 27.2
149526
Summary
No separate summary was provided in the collected bulletin.
View 3 component changes
Audio
Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later
Impact: An app may be able to leak sensitive user information
Description: A logic issue was addressed with improved checks.
CVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin
CoreGraphics
Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later
Impact: Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.
Description: An out-of-bounds write issue was addressed with improved bounds checking.
CVE-2026-86950: Meta Product Security
CoreMedia
Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generationAir 4th generation and later, iPad 9th generation and later, and iPad mini 6th generation and later
Impact: A malicious app may be able to access the camera without user permission
Description: An access issue was addressed with improved access restrictions.
CVE-2026-86990: Mustafa Calap (@ordinal0, dbg.re)
Products covered
iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation
Remediation
Separate remediation guidance was not included in the collected bulletin.
CVEs in this advisory 3
Updates
- Published by Apple Security Releases
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.