https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T18:19:19.858282+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0355 certfr-2026-avi-0355 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-10T18:19:20.053805+00:00 certfr-2026-avi-0355 https://vulnerability.circl.lu/vuln/fkie_cve-2026-28874 fkie_cve-2026-28874 2026-10-10T18:19:20.053883+00:00

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.

 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0261 GCVE-1988-2026-0261 — APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4 2026-10-10T18:19:20.053932+00:00

Affected: APPLE-SA-03-24-2026-1 iOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126792.

Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.

802.1X Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven)

Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software

App Protection Available for: iPhone 11 and later Impact: An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protect…

 https://vulnerability.circl.lu/vuln/ghsa-g93j-w95x-p4ww GHSA-g93j-w95x-p4ww 2026-10-10T18:19:20.054071+00:00

The issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may cause an unexpected app termination.

 https://vulnerability.circl.lu/vuln/ncsc-2026-0101 NCSC-2026-0101 — Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-10-10T18:19:20.054094+00:00 NCSC-2026-0101 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-0852 WID-SEC-W-2026-0852 — Apple iOS: Mehrere Schwachstellen 2026-10-10T18:19:20.054152+00:00

Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.