Medium severity6.6NVD Advisory· Published Aug 17, 2026· Updated Sep 14, 2026
CVE-2026-65349
CVE-2026-65349
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.
Affected products
6cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <26.6.1
- (no CPE)range: before 26.6.1
- Range: before 26.6.1
- Range: before 15.8
Patches
Vulnerability mechanics
References
6- support.apple.com/en-us/148281nvdRelease NotesVendor Advisory
- support.apple.com/en-us/148282nvdRelease NotesVendor Advisory
- support.apple.com/en-us/149036nvd
- support.apple.com/en-us/149037nvd
- support.apple.com/en-us/149038nvd
- support.apple.com/en-us/149043nvd
News mentions
4- Apple Updates Everything, (Mon, Sep 14th)SANS Internet Storm Center · Sep 14, 2026
- Apple Fixes 28 Security Vulnerabilities Across macOS, iOS, and iPadOSCyber Security News · Aug 18, 2026
- Apple iOS: 25 Vulnerabilities Patched in Same-Day Disclosure BatchVypr Intelligence · Aug 17, 2026
- Apple Patches iOS and macOS, (Mon, Aug 17th)SANS Internet Storm Center · Aug 17, 2026