Veille CVE

Mercredi 21 octobre 2026

6 CVE

Critique 0 Élevée 5 Moyenne 0 Faible 0 Non évaluée 1 Exploitées (KEV) Tri : plus récentes « Apple macOS » ✕
  1. CVE-2026-86961 7.8 Élevée

    Apple iOS and iPadOS · Apple macOS

    A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox.

  2. CVE-2026-86922 8.8 Élevée

    Apple Safari · Apple iOS and iPadOS · Apple macOS · Apple visionOS

    A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing maliciously crafted web content may lead to arbitrary code execution.

  3. CVE-2026-86919 8.8 Élevée

    Apple iOS and iPadOS · Apple macOS · Apple visionOS

    A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An attacker with a paired Bluetooth device may be able to execute arbitrary code.

  4. CVE-2026-84579 – Non évaluée

    Apple macOS

    A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may lead to unexpected software execution.

  5. CVE-2026-28853 7.8 Élevée

    Apple macOS

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges.

  6. CVE-2026-111380 8.8 Élevée

    FreeRDP · Freerdp freerdp

    FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket * 2 * nChannels in UINT32 arithmetic, bypassing the CVE-2026-91962 fix. A malicious RDP server can send FramesPerPacket of 2^30 in the audin Open PDU to wrap the multiplication, causing undersized AudioQueueAllocateBuffer allocations and a heap out-of-bounds write in macOS and iOS clients.