CVE-2026-65398

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

16 Sep 2026, 21:09

Type Values Removed Values Added
First Time Apple watchos
Apple visionos
Apple tvos
Apple iphone Os
Apple macos
Apple ipados
Apple
CPE cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/149034 - () https://support.apple.com/en-us/149034 - Vendor Advisory
References () https://support.apple.com/en-us/149035 - () https://support.apple.com/en-us/149035 - Vendor Advisory
References () https://support.apple.com/en-us/149036 - () https://support.apple.com/en-us/149036 - Vendor Advisory
References () https://support.apple.com/en-us/149037 - () https://support.apple.com/en-us/149037 - Vendor Advisory
References () https://support.apple.com/en-us/149038 - () https://support.apple.com/en-us/149038 - Vendor Advisory

16 Sep 2026, 18:17

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8

Information

Published : 2026-09-14 21:17

Updated : 2026-09-16 21:09


NVD link : CVE-2026-65398

Mitre link : CVE-2026-65398

CVE.ORG link : CVE-2026-65398


JSON object : View

Products Affected

apple

  • iphone_os
  • ipados
  • visionos
  • tvos
  • watchos
  • macos
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')