CVE-2026-64726

Analyzed Analyzed - Analysis Complete

Memory Corruption in Apple iOS and macOS

Publication date: 2026-07-27

Last updated on: 2026-07-28

Assigner: Apple Inc.

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-28

Generated

2026-08-17

AI Q&A

2026-07-28

EPSS Evaluated

2026-08-15

NVD

CVE-2026-64726

EUVD

EUVD-2026-49556

Affected Vendors & Products

Vendor	Product	Version / Range
apple	macos	From 26.0 (inc) to 26.6 (exc)
apple	ipados	to 26.6 (exc)
apple	iphone_os	to 26.6 (exc)
apple	tvos	to 26.6 (exc)
apple	visionos	to 26.6 (exc)
apple	watchos	to 26.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability involves an attacker in physical proximity being able to corrupt process memory due to improved memory handling issues. It was addressed and fixed in multiple Apple operating systems including iOS, iPadOS, macOS Tahoe, tvOS, visionOS, and watchOS versions 26.6.

Detection Guidance

This vulnerability is fixed in specific OS versions (iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6). Detection involves checking your device OS versions against these updates. Use system commands like 'sw_vers' on macOS or 'uname -a' on Unix-like systems to verify versions.

Impact Analysis

An attacker with physical proximity could potentially exploit this to corrupt memory in running processes, which may lead to crashes, data corruption, or unauthorized code execution on affected devices.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. The issue involves memory corruption in Apple devices, but no details are given about data exposure, privacy risks, or regulatory implications.

Mitigation Strategies

Update affected devices to iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, or watchOS 26.6 to address the memory corruption issue.

Hi! I’m here to help you understand CVE-2026-64726. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70