https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T18:33:09.461102+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0355 certfr-2026-avi-0355 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-07T18:33:09.478993+00:00 certfr-2026-avi-0355 https://vulnerability.circl.lu/vuln/fkie_cve-2026-28879 fkie_cve-2026-28879 2026-10-07T18:33:09.479069+00:00

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.

 https://vulnerability.circl.lu/vuln/gcve-1988-2026-0261 GCVE-1988-2026-0261 — APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4 2026-10-07T18:33:09.479130+00:00

Affected: APPLE-SA-03-24-2026-1 iOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4

iOS 26.4 and iPadOS 26.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/126792.

Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories.

802.1X Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An attacker in a privileged network position may be able to intercept network traffic Description: An authentication issue was addressed with improved state management. CVE-2026-28865: Héloïse Gollier and Mathy Vanhoef (KU Leuven)

Accounts Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access sensitive user data Description: An authorization issue was addressed with improved state management. CVE-2026-28877: Rosyna Keller of Totally Not Malicious Software

App Protection Available for: iPhone 11 and later Impact: An attacker with physical access to an iOS device with Stolen Device Protection enabled may be able to access biometrics-gated Protect…

 https://vulnerability.circl.lu/vuln/ghsa-r6xf-37w8-p5j6 GHSA-r6xf-37w8-p5j6 2026-10-07T18:33:09.479305+00:00

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. Processing maliciously crafted web content may lead to an unexpected process crash.

 https://vulnerability.circl.lu/vuln/ncsc-2026-0101 NCSC-2026-0101 — Kwetsbaarheden verholpen in Apple iOS en iPadOS 2026-10-07T18:33:09.479335+00:00 NCSC-2026-0101 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-0852 WID-SEC-W-2026-0852 — Apple iOS: Mehrere Schwachstellen 2026-10-07T18:33:09.479405+00:00

Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.