iOS 18.7.10 and iPadOS 18.7.10

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An attacker with physical access may be able to access sensitive user data during iPhone Mirroring

Description: This issue was addressed through improved state management.

CVE-2026-64732: Jorge Welch (@jorgwelch)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious application may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-65404: 이재영, Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, Arni Hardarson (Neonix Security)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An attacker in a privileged network position may be able to cause a denial-of-service

Description: A reachable assertion was addressed with improved input validation.

CVE-2026-43667: Arash Ale Ebrahim from SCy-Phy research group of CISPA Helmholtz Center for Information Security

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64695: Narendra Singh (@_3P1C), Peter Malone

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-43801: Rahul Raj

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43776: Peter Malone, Nicolas Rabrenovic, Irvin Wang, Rishabh Jain (rjcyber) of cyberplanet

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64725: Seonung Park, ALTV!ST (altvi.st/)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A website may be able to determine a user's IP address with Private Relay turned on

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-65355: Xint Code

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to execute arbitrary code with kernel privileges

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-64747: Franco Belman at Blackwing Intelligence

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-64762: Franco Belman at Blackwing Intelligence, Dun

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to delete files for which it does not have permission

Description: A permissions issue was addressed with improved validation.

CVE-2026-64707: YingQi Shi (@Mas0nShi) of DBAppSecurity's WeBin lab

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to modify protected parts of the file system

Description: A race condition was addressed with improved checks.

CVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to add contacts without user authorization

Description: An authorization issue was addressed with improved validation.

CVE-2026-64746: Rodolphe Brunetti (@eisw0lf) of Lupus Nova, Daniel Febrero

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted contact may leak sensitive data

Description: The issue was addressed with improved checks.

CVE-2026-64734: Daniel Williams

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access information about a user's contacts

Description: This issue was addressed with improved checks.

CVE-2026-43797: Arni Hardarson (Neonix Security)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted audio file may corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43673: Anonymous working with TrendAI Zero Day Initiative

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing an audio stream in a maliciously crafted media file may terminate the process

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43744: ret2happy, Mathis Mansière, an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43803: Rahul Raj

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-43711: James Duffy (@0x4A616D657344)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted asset catalog may result in disclosure of process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43738: Peter Malone

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause a denial of service

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84489: stratan (@5tratan), Peter Malone

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-43802: an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious app may be able to access protected user data

Description: The issue was addressed with improved input sanitization.

CVE-2026-43714: an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: This issue was addressed by using HTTPS when sending information over the network.

CVE-2026-64742: Huỳnh Tấn Ngàn

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious app may be able to break out of its sandbox

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-64740: Manuel Fernandez (Stackhopper Security)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to read a persistent device identifier

Description: This issue was addressed with improved data protection.

CVE-2026-43796: Stanislav Jelezoglo, Ilya Andr (andrd3v) of Positive Technologies

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-64692: Redon Gashi

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted image may corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64716: Peter Malone, Jonathan Alush-Aben, Arni Hardarson

CVE-2026-28990: Jiri Ha, Arni Hardarson

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted image may corrupt process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-43661: Gandalf4a of PKU-ICODE, Anton Pakhunov, an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43818: an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted image may lead to a denial-of-service

Description: A type confusion issue was addressed with improved checks.

CVE-2026-64693: Geonha Lee (@leegn4a)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted image may lead to a denial-of-service

Description: A memory corruption issue was addressed with improved bounds checking.

CVE-2026-64714: an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to disclose kernel memory

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-39877: Richard Zana, Dhiyanesh Selvaraj (@redroot97)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to leak sensitive kernel state

Description: An information leakage was addressed with additional validation.

CVE-2026-64760: Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence, an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64749: hxr1, Hiroki Imai (LAC Co., Ltd.), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ashish Kunwar

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to disclose kernel memory

Description: An information leakage was addressed with additional validation.

CVE-2026-64744: Ryan Hileman via Xint Code (xint.io)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-43778: Ashish Kunwar, f0r of MurphySec, Mahmoud Abdelmoniem, Feng Xue and XGPT of ThreatBook, Wang Yu, Nicolas Rabrenovic, Lyutoon, Hiroki Imai (LAC Co., Ltd.), Fábio Luís @scanpt, DARKNAVY (@DarkNavyOrg), an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to bypass network filters

Description: An inconsistent user interface issue was addressed with improved state management.

CVE-2026-64735: Gor Aleksanyan

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-43822: Michal Kosiorek, Eddy Tsalolikhin

CVE-2026-43799: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-64700: Asjid Kalam (@odinshell)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: The issue was addressed with improved input sanitization.

CVE-2026-43724: impost0r (ret2plt), Hyunwoo Kim (@v4bel)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43769: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to leak sensitive kernel state

Description: The issue was addressed with improved input sanitization.

CVE-2026-43722: Hyunwoo Kim (@v4bel), Feng Xue and XGPT of ThreatBook

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: This issue was addressed through improved state management.

CVE-2026-64721: Lukas Gerlach

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43809: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-43757: Wang Yu, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to leak sensitive kernel state

Description: This issue was addressed with improved redaction of sensitive information.

CVE-2026-43754: Ernesto Martínez García, Calif Research

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: A logic issue was addressed with improved checks.

CVE-2026-64723: Ji'an Zhou, Mingxuan Yang, Ye Zhang

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: This issue was addressed with improved input validation.

CVE-2026-39868: Ye Zhang (@VAR10CK) of Baidu Security, Vladislav Shevchenko (Positive Technologies), Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote user may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43810: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to disclose kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64709: Pasquale Scola, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved state handling.

CVE-2026-64717: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious app may be able to break out of its sandbox

Description: An integer overflow was addressed with improved input validation.

CVE-2026-28973: an anonymous researcher

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An attacker may be able to cause unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64739: Feng Xue and XGPT of ThreatBook, Dun

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-64743: Daniel Febrero

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious app may be able to break out of its sandbox

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-64738: Robert Mindo, Nathaniel Oh (@calysteon)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An attacker on the local network may be able to cause a denial-of-service

Description: The issue was addressed with improved memory handling.

CVE-2026-64724: Daisuke Hatakeyama (@SYZD Research)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to gain root privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-43723: Richard Zana, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to cause a denial-of-service

Description: A denial-of-service issue was addressed with improved validation.

CVE-2026-28960: Steven Zhao (zhao.io)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious accessory may be able to cause unexpected app termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-43807: Tristan Madani (@TristanInSec) from Talence Security

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted image may corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43733: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

CVE-2026-43729: Michael DePlante (@izobashi) of TrendAI Zero Day Initiative

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-64772: wh0am1i, stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: An integer overflow was addressed with improved input validation.

CVE-2026-64774: stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64770: stratan (@5tratan)

CVE-2026-64769: stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a 3D model may result in disclosure of process memory

Description: A buffer overflow issue was addressed with improved memory handling.

CVE-2026-64722: wh0am1i

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may cause an unexpected app termination

Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2026-64768: stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A remote attacker may be able to cause unexpected application termination or heap corruption

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-64771: wh0am1i

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-43812: Francisco Knabe

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64764: stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: An out-of-bounds write issue was addressed by removing the vulnerable code.

CVE-2026-64763: stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: An integer overflow was addressed with improved input validation.

CVE-2026-64766: stratan (@5tratan)

CVE-2026-64765: Nik Tsytsarkin, stratan (@5tratan)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: An information disclosure issue was addressed by removing the vulnerable code.

CVE-2026-43800: Stanislav Jelezoglo

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with additional validation.

CVE-2026-28996: Alex Radocea

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: The issue was addressed with improved memory handling.

CVE-2026-43658: Do Young Park

CVE-2026-65338: OpenAI Codex Security - Amy Burnett

CVE-2026-43795: wwwlk

CVE-2026-28984: Artem Dinaburg of Trail of Bits via Anthropic CVD

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved data protection.

CVE-2026-28958: Cantina

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-28947: dr3dd

CVE-2026-43727: Tommy DeVoss from Braze Security Team (@thedawgyg), Gurpreet Shergill, Gia Bui (@yabeow) from Calif.io

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious website may exfiltrate data cross-origin

Description: The issue was addressed with improved checks.

CVE-2026-43735: Rhyru9, Merrick Hare, Kwak Kiyong, Song Nuri, Khai Tran, John Lussier, Gurpreet Shergill, Drinor Selmanaj (Sentry)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: The issue was addressed with improved memory handling.

CVE-2026-39872: Utkarsh Pal, Ignacio Sanmillan (@ulexec)

CVE-2026-43663: Using GLM From Z.AI, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Soyeon Park, Amy Burnett, Khai Tran, sherkito, Kota Toda, HexRabbit (@h3xr4bb1t) and NiNi (@terrynini38514) of DEVCORE Research Team, Brian Carpenter

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A memory corruption issue was addressed with improved state management.

CVE-2026-65334: OpenAI Codex Security - Amy Burnett

CVE-2026-64757: Milad Nasr and Nicholas Carlini with Claude, Anthropic

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-64784: Janggoon Lee of Out of Bounds, OpenAI Codex Security - Amy Burnett

CVE-2026-43676: Tommy DeVoss from Braze Security Team (@thedawgyg), Mateusz Krzywicki (iVerify.io), dr3dd

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: This issue was addressed through improved state management.

CVE-2026-65331: OpenAI Codex Security - Amy Burnett

CVE-2026-65335: OpenAI Codex Security - Amy Burnett

CVE-2026-65332: Kun Peeks (@SwayZGl1tZyyy), OpenAI Codex Security - Amy Burnett

CVE-2026-65333: OpenAI Codex Security - Amy Burnett

CVE-2026-65337: OpenAI Codex Security - Amy Burnett

CVE-2026-65336: Josef Korbel

CVE-2026-65340: Josef Korbel (Citadelo), Claudio Bozzato and Francesco Benvenuto of Cisco Talos

CVE-2026-65351: Niels Hofmans

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: The issue was addressed with improved input validation.

CVE-2026-64781: Thomas Guillem

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A memory corruption vulnerability was addressed with improved locking.

CVE-2026-64782: Charles Kern, Shubham Chaskar, Seonwook Kim, lattice, Josef Korbel

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: The issue was addressed with improved memory handling.

CVE-2026-65341: Henock Habte

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected process crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-64715: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative

CVE-2026-43734: Jonathan Alush-Aben

CVE-2026-43726: Utkarsh Pal, Tristan Madani (@TristanInSec) from Talence Security, stratan (@5tratan) of Almamater Technologies, Narendra Singh (@_3P1C), Josef Korbel (Citadelo), Gia Bui (@yabeow) from Calif.io

CVE-2026-43699: Tommy DeVoss from Braze Security Team (@thedawgyg)

CVE-2026-43742: Юлия Мерцалова

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: The issue was addressed with improved checks.

CVE-2026-64780: OpenAI Codex Security - Amy Burnett

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-43794: Dung Do (@_piers2) of Calif.io

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious website may be able to process restricted web content outside the sandbox

Description: The issue was addressed with improved input validation.

CVE-2026-43725: Luke Francis

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-43731: dr3dd

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to memory corruption

Description: A type confusion issue was addressed with improved checks.

CVE-2026-43705: dr3dd

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious website may exfiltrate data cross-origin

Description: The issue was addressed with improved input validation.

CVE-2026-43708: Muhamad Syaiful, Behzad Najjarpour Jabbari (@_G4ru_)

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may disclose sensitive user information

Description: A cross-origin issue was addressed with improved tracking of security origins.

CVE-2026-43700: Vitaly Simonovich, Christian Meurer Xavier

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: A malicious website may be able to process restricted web content outside the sandbox

Description: The issue was addressed with improved checks.

CVE-2026-43701: Aaron Grattafiori - NVIDIA AI Red Team

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: An out-of-bounds write issue was addressed with improved input validation.

CVE-2026-43745: OpenAI Codex Security - Amy Burnett, Khai Tran

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected process termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-64787: Shubham Chaskar, 杉山 壮太

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-43720: Josef Korbel, Gia Bui (@yabeow) from Calif.io

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Visiting a maliciously crafted website may leak sensitive data

Description: The issue was addressed with improved checks.

CVE-2026-64778: Mohit Negi

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to read files outside of its sandbox

Description: An access issue was addressed with improved access restrictions.

CVE-2026-43821: Brian Carpenter

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A memory corruption vulnerability was addressed with improved locking.

CVE-2026-64779: Tommy DeVoss from Braze Security Team (@thedawgyg), Shubham Chaskar

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-43717: Nan Wang (@eternalsakura13)

CVE-2026-43746: dr3dd

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-64719: Shaheen Fazim

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An attacker in physical proximity may be able to corrupt process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-64726: Peter Malone, Mathis Mansière

Available for: iPhone XS, iPhone XS Max, iPhone XR, iPad 7th generation

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-64755: Stuart Wallace