CVE-2026-65359

Undergoing Analysis Undergoing Analysis - In Progress

Out-of-Bounds Read in Apple iOS and macOS Systems

Publication date: 2026-09-14

Last updated on: 2026-09-18

Assigner: Apple Inc.

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local user may be able to cause unexpected system termination or read kernel memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-18

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-03

NVD

CVE-2026-65359

Affected Vendors & Products

Vendor	Product	Version / Range
apple	ipados	to 26.7 (exc)
apple	iphone_os	to 26.7 (exc)
apple	macos	From 15.0 (inc) to 15.8 (exc)
apple	macos	From 26.0 (inc) to 26.7 (exc)
apple	visionos	to 27.0 (exc)
apple	watchos	to 27.0 (exc)
apple	tvos	to 27.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is an out-of-bounds read vulnerability caused by insufficient bounds checking. A local user could exploit this to cause unexpected system termination or read kernel memory on affected Apple devices.

Detection Guidance

This vulnerability is specific to Apple operating systems and requires checking the installed version against the patched releases. No direct detection commands are provided in the context. Verify system versions using system settings or update tools.

Impact Analysis

An attacker with local access could crash your device or access sensitive kernel memory, potentially leading to unauthorized data exposure or system instability.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a local out-of-bounds read issue in Apple operating systems. However, if exploited, it could potentially lead to unauthorized access to kernel memory, which may indirectly impact data confidentiality requirements under these regulations.

Mitigation Strategies

Update affected Apple devices to the latest versions: iOS 26.7 or 27, iPadOS 26.7 or 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, or watchOS 27. Enable automatic updates if available.

Hi! I’m here to help you understand CVE-2026-65359. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70