High severity7.3NVD Advisory· Published Sep 14, 2026· Updated Sep 16, 2026
CVE-2026-64752
CVE-2026-64752
Description
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
8cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: = 27
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*range: <27.0
- (no CPE)range: = 27
- Range: = 27
- Range: = 27
Patches
Vulnerability mechanics
References
3- support.apple.com/en-us/149034nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149035nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149038nvdRelease NotesVendor Advisory
News mentions
3- Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its DevicesCyber Security News · Sep 15, 2026
- Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 ReleasesSecurityWeek · Sep 15, 2026
- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026