Out-of-Bounds Access Vulnerability in Apple iOS and macOS Products
CVE-2026-64736

7.1HIGH

Key Information:

Vendor: Apple
Status: iOS And iPad OS; Mac OS; TV OS; Visionos
Vendor: CVE Published:; 14 September 2026

What is CVE-2026-64736?

An out-of-bounds access vulnerability was identified in Apple's iOS, iPadOS, and macOS systems, which could allow an application to manipulate system memory improperly. This flaw could potentially lead to unexpected system termination or kernel memory corruption. Apple has implemented enhanced bounds checking in the latest updates to mitigate the risk associated with this vulnerability, ensuring a more secure operating environment for users.

Affected Version(s)

iOS and iPadOS 0 < 26.6.1

macOS 0 < 15.8

macOS 0 < 26.6.2

References

https://support.apple.com/en-us/148281

https://support.apple.com/en-us/148282

https://support.apple.com/en-us/149036

CVSS V3.1

Score:

7.1

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 14, 2026
Vulnerability Reserved
Jul 20, 2026

CVE-2026-64736 Data

JSON