High severity7.1NVD Advisory· Published Sep 14, 2026· Updated Sep 15, 2026
CVE-2026-64736
CVE-2026-64736
Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
Affected products
13cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.6.1
- (no CPE)range: before 26.6.1
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: before 27
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: before 27
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: before 27
- Range: before 15.8
- Range: before 26.6.2
- Range: before 26.6.1
Patches
Vulnerability mechanics
References
6- support.apple.com/en-us/148281nvdRelease NotesVendor Advisory
- support.apple.com/en-us/148282nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149036nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149037nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149038nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149043nvdRelease NotesVendor Advisory
News mentions
2- macOS Sequoia: 25 Vulnerabilities Patched in Same-Day Apple Security UpdateVypr Intelligence · Sep 14, 2026
- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026