<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 12:33:01 +0000</lastBuildDate>
    <item>
      <title>certfr-2026-avi-1236 — Une vulnérabilité a été découverte dans les produits Apple. Elle permet à un attaquant de provoquer une exécution de co…</title>
      <link>https://vulnerability.circl.lu/vuln/certfr-2026-avi-1236</link>
      <description>certfr-2026-avi-1236</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/certfr-2026-avi-1236</guid>
    </item>
    <item>
      <title>fkie_cve-2026-86950</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-86950</link>
      <description>&lt;p&gt;An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-86950</guid>
    </item>
    <item>
      <title>GCVE-1988-2026-0401 — APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1</title>
      <link>https://vulnerability.circl.lu/vuln/gcve-1988-2026-0401</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; unknown iOS&lt;/p&gt;
&lt;p&gt;-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256&lt;/p&gt;
&lt;p&gt;APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1&lt;/p&gt;
&lt;p&gt;iOS 26.7.1 and iPadOS 26.7.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149226.&lt;/p&gt;
&lt;p&gt;Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.&lt;/p&gt;
&lt;p&gt;CoreGraphics
Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation
and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd
generation and later, iPad 8th generation and later, and iPad mini 5th
generation and later
Impact: Processing a maliciously crafted file may lead to arbitrary code
execution. Apple is aware of a report that this issue may have been
exploited in an extremely sophisticated attack against specific targeted
individuals on versions of iOS before iOS 27.
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86950: Meta Product Security&lt;/p&gt;
&lt;p&gt;This update is available through iTunes and Software Update on your iOS
device, and will not appear in your computer&amp;#39;s Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes from
https://www.apple.com/itunes/&lt;/p&gt;
&lt;p&gt;iTunes and Software Update on the device will automatically check
Apple&amp;#39;s update server on its weekly schedule. When an update is
detected, it is downloaded and the opt…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; unknown iOS&lt;/p&gt;
&lt;p&gt;-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256&lt;/p&gt;
&lt;p&gt;APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1&lt;/p&gt;
&lt;p&gt;iOS 26.7.1 and iPadOS 26.7.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/149226.&lt;/p&gt;
&lt;p&gt;Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.&lt;/p&gt;
&lt;p&gt;CoreGraphics
Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation
and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd
generation and later, iPad 8th generation and later, and iPad mini 5th
generation and later
Impact: Processing a maliciously crafted file may lead to arbitrary code
execution. Apple is aware of a report that this issue may have been
exploited in an extremely sophisticated attack against specific targeted
individuals on versions of iOS before iOS 27.
Description: An out-of-bounds write issue was addressed with improved
bounds checking.
CVE-2026-86950: Meta Product Security&lt;/p&gt;
&lt;p&gt;This update is available through iTunes and Software Update on your iOS
device, and will not appear in your computer&amp;#39;s Software Update
application, or in the Apple Downloads site. Make sure you have an
Internet connection and have installed the latest version of iTunes from
https://www.apple.com/itunes/&lt;/p&gt;
&lt;p&gt;iTunes and Software Update on the device will automatically check
Apple&amp;#39;s update server on its weekly schedule. When an update is
detected, it is downloaded and the opt…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gcve-1988-2026-0401</guid>
    </item>
    <item>
      <title>GHSA-3cf3-h799-fjvq</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-3cf3-h799-fjvq</link>
      <description>&lt;p&gt;An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-3cf3-h799-fjvq</guid>
    </item>
    <item>
      <title>NCSC-2026-0397 — Kwetsbaarheid verholpen in Apple CoreGraphics</title>
      <link>https://vulnerability.circl.lu/vuln/ncsc-2026-0397</link>
      <description>NCSC-2026-0397</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ncsc-2026-0397</guid>
    </item>
  </channel>
</rss>
