Vulnerability-Lookup

CERTFR-2026-AVI-1172

Vulnerability from certfr_avis - Published: 2026-09-15 - Updated: 2026-09-15

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Apple	iOS	iOS versions antérieures à 27
Apple	macOS	macOS Tahoe versions antérieures à 26.7
Apple	Safari	Safari versions antérieures à 27
Apple	Xcode	Xcode versions antérieures à 27
Apple	macOS	macOS Golden Gate versions antérieures à 27
Apple	iOS	iOS versions antérieures à 26.7
Apple	iPadOS	iPadOS versions antérieures à 26.7
Apple	tvOS	tvOS versions antérieures à 27
Apple	iPadOS	iPadOS versions antérieures à 27
Apple	visionOS	visionOS versions antérieures à 26.6.1
Apple	visionOS	visionOS versions antérieures à 27
Apple	macOS	macOS Sequoia versions antérieures à 15.8
Apple	watchOS	watchOS versions antérieures à 27

References

Title

Publication Time

Tags

Bulletin de sécurité Apple 149036	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149041	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 148353	2026-08-17	vendor-advisory
Bulletin de sécurité Apple 149035	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149034	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149042	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149039	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149038	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149040	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149043	2026-09-14	vendor-advisory
Bulletin de sécurité Apple 149037	2026-09-14	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Tahoe versions ant\u00e9rieures \u00e0 26.7",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Safari versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "Safari",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "Xcode versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "Xcode",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Golden Gate versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iOS versions ant\u00e9rieures \u00e0 26.7",
      "product": {
        "name": "iOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 26.7",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "tvOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "tvOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "iPadOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "iPadOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 26.6.1",
      "product": {
        "name": "visionOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "visionOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "visionOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "macOS Sequoia versions ant\u00e9rieures \u00e0 15.8",
      "product": {
        "name": "macOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    },
    {
      "description": "watchOS versions ant\u00e9rieures \u00e0 27",
      "product": {
        "name": "watchOS",
        "vendor": {
          "name": "Apple",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-86886",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86886"
    },
    {
      "name": "CVE-2026-86885",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86885"
    },
    {
      "name": "CVE-2026-65362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65362"
    },
    {
      "name": "CVE-2026-28930",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28930"
    },
    {
      "name": "CVE-2026-86879",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86879"
    },
    {
      "name": "CVE-2026-43697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43697"
    },
    {
      "name": "CVE-2026-65391",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65391"
    },
    {
      "name": "CVE-2026-84566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84566"
    },
    {
      "name": "CVE-2026-84572",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84572"
    },
    {
      "name": "CVE-2026-43664",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43664"
    },
    {
      "name": "CVE-2026-84558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84558"
    },
    {
      "name": "CVE-2026-84553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84553"
    },
    {
      "name": "CVE-2026-84626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84626"
    },
    {
      "name": "CVE-2026-84549",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84549"
    },
    {
      "name": "CVE-2026-64788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64788"
    },
    {
      "name": "CVE-2026-65337",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65337"
    },
    {
      "name": "CVE-2026-84527",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84527"
    },
    {
      "name": "CVE-2026-84487",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84487"
    },
    {
      "name": "CVE-2026-86890",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86890"
    },
    {
      "name": "CVE-2026-84556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84556"
    },
    {
      "name": "CVE-2026-84489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84489"
    },
    {
      "name": "CVE-2026-84520",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84520"
    },
    {
      "name": "CVE-2026-65331",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65331"
    },
    {
      "name": "CVE-2026-65352",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65352"
    },
    {
      "name": "CVE-2026-43695",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43695"
    },
    {
      "name": "CVE-2026-43738",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43738"
    },
    {
      "name": "CVE-2026-84621",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84621"
    },
    {
      "name": "CVE-2026-84517",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84517"
    },
    {
      "name": "CVE-2026-84585",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84585"
    },
    {
      "name": "CVE-2026-84522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84522"
    },
    {
      "name": "CVE-2026-86887",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86887"
    },
    {
      "name": "CVE-2026-65381",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65381"
    },
    {
      "name": "CVE-2026-43791",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43791"
    },
    {
      "name": "CVE-2026-86905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86905"
    },
    {
      "name": "CVE-2026-84565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84565"
    },
    {
      "name": "CVE-2026-86902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86902"
    },
    {
      "name": "CVE-2026-84580",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84580"
    },
    {
      "name": "CVE-2026-84559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84559"
    },
    {
      "name": "CVE-2026-65332",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65332"
    },
    {
      "name": "CVE-2026-84491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84491"
    },
    {
      "name": "CVE-2026-65413",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65413"
    },
    {
      "name": "CVE-2026-84615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84615"
    },
    {
      "name": "CVE-2026-43661",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43661"
    },
    {
      "name": "CVE-2026-64760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64760"
    },
    {
      "name": "CVE-2026-65406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65406"
    },
    {
      "name": "CVE-2026-84611",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84611"
    },
    {
      "name": "CVE-2026-64712",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64712"
    },
    {
      "name": "CVE-2026-65365",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65365"
    },
    {
      "name": "CVE-2026-65343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65343"
    },
    {
      "name": "CVE-2026-84630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84630"
    },
    {
      "name": "CVE-2026-84551",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84551"
    },
    {
      "name": "CVE-2026-65400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65400"
    },
    {
      "name": "CVE-2026-43696",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43696"
    },
    {
      "name": "CVE-2026-84635",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84635"
    },
    {
      "name": "CVE-2026-84540",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84540"
    },
    {
      "name": "CVE-2026-65364",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65364"
    },
    {
      "name": "CVE-2026-65340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65340"
    },
    {
      "name": "CVE-2026-84538",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84538"
    },
    {
      "name": "CVE-2026-64790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64790"
    },
    {
      "name": "CVE-2026-64761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64761"
    },
    {
      "name": "CVE-2026-43698",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43698"
    },
    {
      "name": "CVE-2026-65399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65399"
    },
    {
      "name": "CVE-2026-84550",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84550"
    },
    {
      "name": "CVE-2026-86895",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86895"
    },
    {
      "name": "CVE-2026-65412",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65412"
    },
    {
      "name": "CVE-2026-20683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20683"
    },
    {
      "name": "CVE-2026-86876",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86876"
    },
    {
      "name": "CVE-2022-3437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-3437"
    },
    {
      "name": "CVE-2026-43763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43763"
    },
    {
      "name": "CVE-2026-84506",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84506"
    },
    {
      "name": "CVE-2026-84512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84512"
    },
    {
      "name": "CVE-2026-84631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84631"
    },
    {
      "name": "CVE-2026-84544",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84544"
    },
    {
      "name": "CVE-2026-65344",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65344"
    },
    {
      "name": "CVE-2026-43691",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43691"
    },
    {
      "name": "CVE-2026-64753",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64753"
    },
    {
      "name": "CVE-2026-65360",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65360"
    },
    {
      "name": "CVE-2026-64752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64752"
    },
    {
      "name": "CVE-2026-84620",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84620"
    },
    {
      "name": "CVE-2026-84543",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84543"
    },
    {
      "name": "CVE-2026-84629",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84629"
    },
    {
      "name": "CVE-2026-84541",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84541"
    },
    {
      "name": "CVE-2026-84505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84505"
    },
    {
      "name": "CVE-2026-64781",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64781"
    },
    {
      "name": "CVE-2026-84623",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84623"
    },
    {
      "name": "CVE-2026-84619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84619"
    },
    {
      "name": "CVE-2026-84513",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84513"
    },
    {
      "name": "CVE-2026-84534",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84534"
    },
    {
      "name": "CVE-2026-86888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86888"
    },
    {
      "name": "CVE-2026-84531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84531"
    },
    {
      "name": "CVE-2026-65345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65345"
    },
    {
      "name": "CVE-2026-84625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84625"
    },
    {
      "name": "CVE-2026-84497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84497"
    },
    {
      "name": "CVE-2026-84554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84554"
    },
    {
      "name": "CVE-2026-64787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64787"
    },
    {
      "name": "CVE-2026-65339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65339"
    },
    {
      "name": "CVE-2026-86897",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86897"
    },
    {
      "name": "CVE-2026-86884",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86884"
    },
    {
      "name": "CVE-2026-84596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84596"
    },
    {
      "name": "CVE-2026-86911",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86911"
    },
    {
      "name": "CVE-2026-43674",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43674"
    },
    {
      "name": "CVE-2026-84532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84532"
    },
    {
      "name": "CVE-2026-28935",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28935"
    },
    {
      "name": "CVE-2026-64718",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64718"
    },
    {
      "name": "CVE-2026-84600",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84600"
    },
    {
      "name": "CVE-2026-43737",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43737"
    },
    {
      "name": "CVE-2026-84524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84524"
    },
    {
      "name": "CVE-2026-86904",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86904"
    },
    {
      "name": "CVE-2026-86894",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86894"
    },
    {
      "name": "CVE-2026-28969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28969"
    },
    {
      "name": "CVE-2026-65395",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65395"
    },
    {
      "name": "CVE-2026-84593",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84593"
    },
    {
      "name": "CVE-2026-84597",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84597"
    },
    {
      "name": "CVE-2026-84530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84530"
    },
    {
      "name": "CVE-2026-84533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84533"
    },
    {
      "name": "CVE-2026-65351",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65351"
    },
    {
      "name": "CVE-2026-84576",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84576"
    },
    {
      "name": "CVE-2026-28966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28966"
    },
    {
      "name": "CVE-2026-84568",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84568"
    },
    {
      "name": "CVE-2026-84616",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84616"
    },
    {
      "name": "CVE-2026-84581",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84581"
    },
    {
      "name": "CVE-2026-64779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64779"
    },
    {
      "name": "CVE-2026-65341",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65341"
    },
    {
      "name": "CVE-2026-84589",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84589"
    },
    {
      "name": "CVE-2026-86882",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86882"
    },
    {
      "name": "CVE-2026-65377",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65377"
    },
    {
      "name": "CVE-2026-65410",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65410"
    },
    {
      "name": "CVE-2026-84516",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84516"
    },
    {
      "name": "CVE-2026-43683",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43683"
    },
    {
      "name": "CVE-2026-86917",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86917"
    },
    {
      "name": "CVE-2026-43677",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43677"
    },
    {
      "name": "CVE-2026-65404",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65404"
    },
    {
      "name": "CVE-2026-43787",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43787"
    },
    {
      "name": "CVE-2026-84518",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84518"
    },
    {
      "name": "CVE-2026-43790",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43790"
    },
    {
      "name": "CVE-2026-84617",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84617"
    },
    {
      "name": "CVE-2026-65334",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65334"
    },
    {
      "name": "CVE-2026-84563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84563"
    },
    {
      "name": "CVE-2026-43689",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43689"
    },
    {
      "name": "CVE-2026-84521",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84521"
    },
    {
      "name": "CVE-2026-65414",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65414"
    },
    {
      "name": "CVE-2026-84612",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84612"
    },
    {
      "name": "CVE-2026-84515",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84515"
    },
    {
      "name": "CVE-2026-64782",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64782"
    },
    {
      "name": "CVE-2026-84537",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84537"
    },
    {
      "name": "CVE-2026-84525",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84525"
    },
    {
      "name": "CVE-2026-84523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84523"
    },
    {
      "name": "CVE-2026-28934",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28934"
    },
    {
      "name": "CVE-2026-84574",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84574"
    },
    {
      "name": "CVE-2026-86889",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86889"
    },
    {
      "name": "CVE-2026-65346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65346"
    },
    {
      "name": "CVE-2026-34979",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-34979"
    },
    {
      "name": "CVE-2026-64778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64778"
    },
    {
      "name": "CVE-2026-84601",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84601"
    },
    {
      "name": "CVE-2026-65329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65329"
    },
    {
      "name": "CVE-2026-84555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84555"
    },
    {
      "name": "CVE-2026-64780",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64780"
    },
    {
      "name": "CVE-2026-84514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84514"
    },
    {
      "name": "CVE-2026-65378",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65378"
    },
    {
      "name": "CVE-2026-86878",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86878"
    },
    {
      "name": "CVE-2026-86924",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86924"
    },
    {
      "name": "CVE-2026-86869",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86869"
    },
    {
      "name": "CVE-2026-65354",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65354"
    },
    {
      "name": "CVE-2026-65405",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65405"
    },
    {
      "name": "CVE-2026-84492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84492"
    },
    {
      "name": "CVE-2026-84586",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84586"
    },
    {
      "name": "CVE-2026-43684",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43684"
    },
    {
      "name": "CVE-2026-84583",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84583"
    },
    {
      "name": "CVE-2026-84598",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84598"
    },
    {
      "name": "CVE-2026-65393",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65393"
    },
    {
      "name": "CVE-2026-43688",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43688"
    },
    {
      "name": "CVE-2026-84571",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84571"
    },
    {
      "name": "CVE-2026-43786",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43786"
    },
    {
      "name": "CVE-2026-84546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84546"
    },
    {
      "name": "CVE-2026-86910",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86910"
    },
    {
      "name": "CVE-2026-64714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64714"
    },
    {
      "name": "CVE-2026-43719",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43719"
    },
    {
      "name": "CVE-2026-84606",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84606"
    },
    {
      "name": "CVE-2026-86901",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86901"
    },
    {
      "name": "CVE-2026-86881",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86881"
    },
    {
      "name": "CVE-2026-43687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43687"
    },
    {
      "name": "CVE-2026-86903",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86903"
    },
    {
      "name": "CVE-2026-65361",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65361"
    },
    {
      "name": "CVE-2026-84577",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84577"
    },
    {
      "name": "CVE-2026-84622",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84622"
    },
    {
      "name": "CVE-2026-64758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64758"
    },
    {
      "name": "CVE-2026-65376",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65376"
    },
    {
      "name": "CVE-2026-84588",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84588"
    },
    {
      "name": "CVE-2026-65349",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65349"
    },
    {
      "name": "CVE-2026-86870",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86870"
    },
    {
      "name": "CVE-2026-65390",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65390"
    },
    {
      "name": "CVE-2026-86900",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86900"
    },
    {
      "name": "CVE-2026-43686",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43686"
    },
    {
      "name": "CVE-2026-84636",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84636"
    },
    {
      "name": "CVE-2026-84587",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84587"
    },
    {
      "name": "CVE-2026-65380",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65380"
    },
    {
      "name": "CVE-2026-43794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43794"
    },
    {
      "name": "CVE-2026-84548",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84548"
    },
    {
      "name": "CVE-2026-65348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65348"
    },
    {
      "name": "CVE-2026-65355",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65355"
    },
    {
      "name": "CVE-2026-65409",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65409"
    },
    {
      "name": "CVE-2026-65403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65403"
    },
    {
      "name": "CVE-2026-65369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65369"
    },
    {
      "name": "CVE-2026-65382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65382"
    },
    {
      "name": "CVE-2026-84578",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84578"
    },
    {
      "name": "CVE-2026-86891",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86891"
    },
    {
      "name": "CVE-2026-84569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84569"
    },
    {
      "name": "CVE-2026-43702",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43702"
    },
    {
      "name": "CVE-2026-84624",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84624"
    },
    {
      "name": "CVE-2026-84609",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84609"
    },
    {
      "name": "CVE-2026-28937",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28937"
    },
    {
      "name": "CVE-2026-84507",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84507"
    },
    {
      "name": "CVE-2026-28899",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28899"
    },
    {
      "name": "CVE-2026-84575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84575"
    },
    {
      "name": "CVE-2026-84560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84560"
    },
    {
      "name": "CVE-2026-43743",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43743"
    },
    {
      "name": "CVE-2026-65336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65336"
    },
    {
      "name": "CVE-2026-43692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43692"
    },
    {
      "name": "CVE-2026-43785",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43785"
    },
    {
      "name": "CVE-2026-43741",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43741"
    },
    {
      "name": "CVE-2026-84519",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84519"
    },
    {
      "name": "CVE-2026-64784",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64784"
    },
    {
      "name": "CVE-2026-84552",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84552"
    },
    {
      "name": "CVE-2026-86892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86892"
    },
    {
      "name": "CVE-2026-64715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64715"
    },
    {
      "name": "CVE-2026-65371",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65371"
    },
    {
      "name": "CVE-2026-65402",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65402"
    },
    {
      "name": "CVE-2026-84509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84509"
    },
    {
      "name": "CVE-2026-28968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28968"
    },
    {
      "name": "CVE-2026-65347",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65347"
    },
    {
      "name": "CVE-2026-86893",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86893"
    },
    {
      "name": "CVE-2026-43795",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43795"
    },
    {
      "name": "CVE-2026-84618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84618"
    },
    {
      "name": "CVE-2026-86909",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86909"
    },
    {
      "name": "CVE-2026-43788",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43788"
    },
    {
      "name": "CVE-2026-86883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86883"
    },
    {
      "name": "CVE-2026-84567",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84567"
    },
    {
      "name": "CVE-2026-65415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65415"
    },
    {
      "name": "CVE-2026-65383",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65383"
    },
    {
      "name": "CVE-2026-84511",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84511"
    },
    {
      "name": "CVE-2026-84628",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84628"
    },
    {
      "name": "CVE-2026-84602",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84602"
    },
    {
      "name": "CVE-2026-65411",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65411"
    },
    {
      "name": "CVE-2026-84535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84535"
    },
    {
      "name": "CVE-2026-84561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84561"
    },
    {
      "name": "CVE-2026-65335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65335"
    },
    {
      "name": "CVE-2026-84584",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84584"
    },
    {
      "name": "CVE-2026-84573",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84573"
    },
    {
      "name": "CVE-2026-84570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84570"
    },
    {
      "name": "CVE-2026-84632",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84632"
    },
    {
      "name": "CVE-2026-84526",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84526"
    },
    {
      "name": "CVE-2026-65333",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65333"
    },
    {
      "name": "CVE-2026-43789",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43789"
    },
    {
      "name": "CVE-2026-84607",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84607"
    },
    {
      "name": "CVE-2026-65408",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65408"
    },
    {
      "name": "CVE-2026-84536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84536"
    },
    {
      "name": "CVE-2026-64736",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64736"
    },
    {
      "name": "CVE-2026-43715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43715"
    },
    {
      "name": "CVE-2026-84564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84564"
    },
    {
      "name": "CVE-2026-43690",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43690"
    },
    {
      "name": "CVE-2026-65342",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65342"
    },
    {
      "name": "CVE-2026-65359",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65359"
    },
    {
      "name": "CVE-2026-43760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43760"
    },
    {
      "name": "CVE-2026-84510",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84510"
    },
    {
      "name": "CVE-2026-65358",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65358"
    },
    {
      "name": "CVE-2026-65374",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65374"
    },
    {
      "name": "CVE-2026-65398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65398"
    },
    {
      "name": "CVE-2026-65338",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65338"
    },
    {
      "name": "CVE-2026-84603",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84603"
    },
    {
      "name": "CVE-2026-65401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65401"
    },
    {
      "name": "CVE-2026-64756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-64756"
    },
    {
      "name": "CVE-2026-65330",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65330"
    },
    {
      "name": "CVE-2026-65407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65407"
    },
    {
      "name": "CVE-2026-86898",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86898"
    },
    {
      "name": "CVE-2026-65375",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-65375"
    }
  ],
  "initial_release_date": "2026-09-15T00:00:00",
  "last_revision_date": "2026-09-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1172",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Apple. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Apple",
  "vendor_advisories": [
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149036",
      "url": "https://support.apple.com/en-us/149036"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149041",
      "url": "https://support.apple.com/en-us/149041"
    },
    {
      "published_at": "2026-08-17",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 148353",
      "url": "https://support.apple.com/en-us/148353"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149035",
      "url": "https://support.apple.com/en-us/149035"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149034",
      "url": "https://support.apple.com/en-us/149034"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149042",
      "url": "https://support.apple.com/en-us/149042"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149039",
      "url": "https://support.apple.com/en-us/149039"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149038",
      "url": "https://support.apple.com/en-us/149038"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149040",
      "url": "https://support.apple.com/en-us/149040"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149043",
      "url": "https://support.apple.com/en-us/149043"
    },
    {
      "published_at": "2026-09-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Apple 149037",
      "url": "https://support.apple.com/en-us/149037"
    }
  ]
}

CVE-2022-3437 (GCVE-0-2022-3437)

Vulnerability from cvelistv5 – Published: 2023-01-12 00:00 – Updated: 2024-10-28 18:59

Summary

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-04-22 18:53 UTC

CWE

CWE-122 - - Heap-based Buffer Overflow, CWE-787 - Out-of-bounds Write

Assigner

redhat redhat root

References

8 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=2137774
https://www.samba.org/samba/security/CVE-2022-3437.html
https://access.redhat.com/security/cve/CVE-2022-3437
http://www.openwall.com/lists/oss-security/2023/02/08/1	mailing-list
https://security.netapp.com/advisory/ntap-2023021…
https://security.gentoo.org/glsa/202309-06	vendor-advisory
https://security.gentoo.org/glsa/202310-06	vendor-advisory
https://lists.debian.org/debian-lts-announce/2024…	mailing-list

Impacted products

2 products

Vendor	Product	Version
n/a	samba	Affected: Fixed in samba 4.15.11, samba 4.16.6, samba 4.17.2.
samba	samba	Unaffected: 4.15.11 cpe:2.3:a:samba:samba:4.15.11:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:samba:samba:4.15.11:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "samba",
            "vendor": "samba",
            "versions": [
              {
                "status": "unaffected",
                "version": "4.15.11"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-3437",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-22T18:53:20.072020Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-28T18:59:39.543Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:07:06.624Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2137774"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2022-3437.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2022-3437"
          },
          {
            "name": "[oss-security] 20230208 [vs] heimdal: CVE-2022-45142: signature validation failure",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/02/08/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20230216-0008/"
          },
          {
            "name": "GLSA-202309-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202309-06"
          },
          {
            "name": "GLSA-202310-06",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202310-06"
          },
          {
            "name": "[debian-lts-announce] 20240422 [SECURITY] [DLA 3792-1] samba security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "samba",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Fixed in samba 4.15.11, samba 4.16.6, samba 4.17.2."
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 - Heap-based Buffer Overflow, CWE-787 - Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-22T16:06:05.042Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2137774"
        },
        {
          "url": "https://www.samba.org/samba/security/CVE-2022-3437.html"
        },
        {
          "url": "https://access.redhat.com/security/cve/CVE-2022-3437"
        },
        {
          "name": "[oss-security] 20230208 [vs] heimdal: CVE-2022-45142: signature validation failure",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2023/02/08/1"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20230216-0008/"
        },
        {
          "name": "GLSA-202309-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202309-06"
        },
        {
          "name": "GLSA-202310-06",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202310-06"
        },
        {
          "name": "[debian-lts-announce] 20240422 [SECURITY] [DLA 3792-1] samba security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-3437",
    "datePublished": "2023-01-12T00:00:00.000Z",
    "dateReserved": "2022-10-10T00:00:00.000Z",
    "dateUpdated": "2024-10-28T18:59:39.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-20683 (GCVE-0-2026-20683)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:49 – Updated: 2026-09-14 20:49

Summary

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.

Severity

No CVSS data available.

CWE

An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account

Assigner

apple mitre root

References

5 references

URL	Tags
https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

Impacted products

3 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: 0 , < 27 (custom)
Apple	macOS	Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)
Apple	visionOS	Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user\u0027s Apple Account."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to use the Sign In With Apple authentication flow to access the user\u0027s Apple Account",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:06.881Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-20683",
    "datePublished": "2026-09-14T20:49:06.881Z",
    "dateReserved": "2025-11-11T14:43:07.873Z",
    "dateUpdated": "2026-09-14T20:49:06.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28899 (GCVE-0-2026-28899)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:49 – Updated: 2026-09-14 20:49

Summary

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper checks.

Severity

No CVSS data available.

CWE

An app may bypass Gatekeeper checks

Assigner

apple mitre root

References

4 references

URL	Tags
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.6 (custom) Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, macOS Tahoe 26.7. An app may bypass Gatekeeper checks."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may bypass Gatekeeper checks",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:03.117Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/128067"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28899",
    "datePublished": "2026-09-14T20:49:03.117Z",
    "dateReserved": "2026-03-03T16:36:03.983Z",
    "dateUpdated": "2026-09-14T20:49:03.117Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28930 (GCVE-0-2026-28930)

Vulnerability from cvelistv5 – Published: 2026-05-11 20:08 – Updated: 2026-05-13 13:55

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 13:45 UTC

CWE

An app may be able to access protected user data
CWE-284 - Improper Access Control

Assigner

apple mitre root

References

1 reference

URL	Tags
https://support.apple.com/en-us/127115

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 26.5 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-28930",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T13:45:47.262743Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-13T13:55:36.822Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.5. An app may be able to access protected user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access protected user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:08:26.116Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127115"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28930",
    "datePublished": "2026-05-11T20:08:26.116Z",
    "dateReserved": "2026-03-03T16:36:03.987Z",
    "dateUpdated": "2026-05-13T13:55:36.822Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28934 (GCVE-0-2026-28934)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:47 – Updated: 2026-09-15 16:59

Summary

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-15 16:59 UTC

CWE

Mounting a malicious disk image may cause unexpected system termination
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

apple mitre root

References

3 references

URL	Tags
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-28934",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T16:59:37.428869Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T16:59:40.393Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a malicious disk image may cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Mounting a malicious disk image may cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:47:20.065Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28934",
    "datePublished": "2026-09-14T20:47:20.065Z",
    "dateReserved": "2026-03-03T16:36:03.988Z",
    "dateUpdated": "2026-09-15T16:59:40.393Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28935 (GCVE-0-2026-28935)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:48 – Updated: 2026-09-14 20:48

Summary

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Severity

No CVSS data available.

CWE

An app may be able to cause unexpected system termination or corrupt kernel memory

Assigner

apple mitre root

References

6 references

URL	Tags
https://support.apple.com/en-us/148281
https://support.apple.com/en-us/148282
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149043

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: 0 , < 26.6.1 (custom)
Apple	macOS	Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.6.2 (custom)
Apple	tvOS	Affected: 0 , < 27 (custom)
Apple	visionOS	Affected: 0 , < 27 (custom)
Apple	watchOS	Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.6.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.6.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:48:08.370Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/148281"
        },
        {
          "url": "https://support.apple.com/en-us/148282"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28935",
    "datePublished": "2026-09-14T20:48:08.370Z",
    "dateReserved": "2026-03-03T16:36:03.988Z",
    "dateUpdated": "2026-09-14T20:48:08.370Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28937 (GCVE-0-2026-28937)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:52 – Updated: 2026-09-15 19:28

Summary

This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-15 19:28 UTC

CWE

An app may be able to access sensitive user data
CWE-284 - Improper Access Control

Assigner

apple mitre root

References

1 reference

URL	Tags
https://support.apple.com/en-us/149035

Impacted products

1 product

Vendor	Product	Version
Apple	macOS	Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-28937",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T19:28:00.570217Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T19:28:15.122Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to access sensitive user data",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:52:00.649Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149035"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28937",
    "datePublished": "2026-09-14T20:52:00.649Z",
    "dateReserved": "2026-03-03T16:36:03.989Z",
    "dateUpdated": "2026-09-15T19:28:15.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28966 (GCVE-0-2026-28966)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:50 – Updated: 2026-09-14 20:50

Summary

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

Severity

No CVSS data available.

CWE

Processing a maliciously crafted file may lead to unexpected app termination

Assigner

apple mitre root

References

7 references

URL	Tags
https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149041
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

Impacted products

4 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)
Apple	macOS	Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)
Apple	tvOS	Affected: 0 , < 27 (custom)
Apple	visionOS	Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted file may lead to unexpected app termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted file may lead to unexpected app termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:50:26.681Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28966",
    "datePublished": "2026-09-14T20:50:26.681Z",
    "dateReserved": "2026-03-03T16:36:03.992Z",
    "dateUpdated": "2026-09-14T20:50:26.681Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28968 (GCVE-0-2026-28968)

Vulnerability from cvelistv5 – Published: 2026-09-14 20:49 – Updated: 2026-09-14 20:49

Summary

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

Severity

No CVSS data available.

CWE

An app may be able to cause unexpected system termination or corrupt kernel memory

Assigner

apple mitre root

References

8 references

URL	Tags
https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149041
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)
Apple	macOS	Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)
Apple	tvOS	Affected: 0 , < 27 (custom)
Apple	visionOS	Affected: 0 , < 27 (custom)
Apple	watchOS	Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination or corrupt kernel memory",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:49:25.356Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149041"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28968",
    "datePublished": "2026-09-14T20:49:25.356Z",
    "dateReserved": "2026-03-03T16:36:03.992Z",
    "dateUpdated": "2026-09-14T20:49:25.356Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28969 (GCVE-0-2026-28969)

Vulnerability from cvelistv5 – Published: 2026-05-11 20:07 – Updated: 2026-09-14 20:48

Summary

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Tahoe 26.7, tvOS 26.5, tvOS 27, visionOS 26.5, visionOS 27, watchOS 26.5, watchOS 27. An app may be able to cause unexpected system termination.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-12 13:23 UTC

CWE

An app may be able to cause unexpected system termination
CWE-416 - Use After Free

Assigner

apple mitre root

References

15 references

URL	Tags
https://support.apple.com/en-us/127110
https://support.apple.com/en-us/127111
https://support.apple.com/en-us/127115
https://support.apple.com/en-us/127116
https://support.apple.com/en-us/127117
https://support.apple.com/en-us/127118
https://support.apple.com/en-us/127119
https://support.apple.com/en-us/127120
https://support.apple.com/en-us/149034
https://support.apple.com/en-us/149035
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149042
https://support.apple.com/en-us/149043

Impacted products

5 products

Vendor	Product	Version
Apple	iOS and iPadOS	Affected: 0 , < 18.7.9 (custom) Affected: 0 , < 26.5 (custom) Affected: 0 , < 27 (custom)
Apple	macOS	Affected: 0 , < 14.8.7 (custom) Affected: 0 , < 15.7.7 (custom) Affected: 0 , < 15.8 (custom) Affected: 0 , < 26.5 (custom) Affected: 0 , < 26.7 (custom) Affected: 0 , < 27 (custom)
Apple	tvOS	Affected: 0 , < 26.5 (custom) Affected: 0 , < 27 (custom)
Apple	visionOS	Affected: 0 , < 26.5 (custom) Affected: 0 , < 27 (custom)
Apple	watchOS	Affected: 0 , < 26.5 (custom) Affected: 0 , < 27 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-28969",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-12T13:23:17.375854Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T13:23:22.141Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.7.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.8.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.7.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "15.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "26.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "26.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "27",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.7, macOS Sequoia 15.8, macOS Sonoma 14.8.7, macOS Tahoe 26.5, macOS Tahoe 26.7, tvOS 26.5, tvOS 27, visionOS 26.5, visionOS 27, watchOS 26.5, watchOS 27. An app may be able to cause unexpected system termination."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to cause unexpected system termination",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T20:48:32.905Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/127110"
        },
        {
          "url": "https://support.apple.com/en-us/127111"
        },
        {
          "url": "https://support.apple.com/en-us/127115"
        },
        {
          "url": "https://support.apple.com/en-us/127116"
        },
        {
          "url": "https://support.apple.com/en-us/127117"
        },
        {
          "url": "https://support.apple.com/en-us/127118"
        },
        {
          "url": "https://support.apple.com/en-us/127119"
        },
        {
          "url": "https://support.apple.com/en-us/127120"
        },
        {
          "url": "https://support.apple.com/en-us/149034"
        },
        {
          "url": "https://support.apple.com/en-us/149035"
        },
        {
          "url": "https://support.apple.com/en-us/149036"
        },
        {
          "url": "https://support.apple.com/en-us/149037"
        },
        {
          "url": "https://support.apple.com/en-us/149038"
        },
        {
          "url": "https://support.apple.com/en-us/149042"
        },
        {
          "url": "https://support.apple.com/en-us/149043"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2026-28969",
    "datePublished": "2026-05-11T20:07:55.362Z",
    "dateReserved": "2026-03-03T16:36:03.992Z",
    "dateUpdated": "2026-09-14T20:48:32.905Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CERTFR-2026-AVI-1172

Solutions

CVE-2022-3437 (GCVE-0-2022-3437)

CVE-2026-20683 (GCVE-0-2026-20683)

CVE-2026-28899 (GCVE-0-2026-28899)

CVE-2026-28930 (GCVE-0-2026-28930)

CVE-2026-28934 (GCVE-0-2026-28934)

CVE-2026-28935 (GCVE-0-2026-28935)

CVE-2026-28937 (GCVE-0-2026-28937)

CVE-2026-28966 (GCVE-0-2026-28966)

CVE-2026-28968 (GCVE-0-2026-28968)

CVE-2026-28969 (GCVE-0-2026-28969)

Tags

Sightings

Nomenclature

Related by attack behaviour