AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AppleCVE-2026-64738

Apple iOS and iPadOS: improper access control

Apple

CVE-2026-64738 · Published Jul 27, 2026 · updated Aug 17, 2026

Critical9.8
Fix: upgrade to 18.7.10 or later (4 fixed versions below)
Apple advisory

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Affected versions

PackageAffectedFixed in
iOS and iPadOS
Product
< 18.7.1018.7.10
macOS
Product
< 14.8.814.8.8
< 15.7.815.7.8
< 26.626.6
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-284

More Apple advisories

All Apple
Critical 9.8Jul 27Apple iOS and iPadOS: out-of-bounds writeCVE-2026-64769fixed in 18.7.10 +3Critical 9.8Jul 27Apple iOS and iPadOS: out-of-bounds writeCVE-2026-64770fixed in 18.7.10 +3Critical 9.8Jul 27Apple iOS and iPadOS: buffer overflowCVE-2026-64771fixed in 18.7.10 +2Critical 9.8Jul 27Apple iOS and iPadOS: out-of-bounds writeCVE-2026-64772fixed in 18.7.10 +2Critical 9.8Jul 27Apple iOS and iPadOS: integer overflowCVE-2026-64774fixed in 18.7.10 +3Critical 9.8Jul 27A memory initialization issue was addressed with improved memory handlingCVE-2026-64775fixed in 26.6 +2