Out-of-Bounds Write Vulnerability in Apple's iOS and macOS Products
CVE-2026-64764

7.8HIGH

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Visionos
Vendor
CVE Published:
27 July 2026

What is CVE-2026-64764?

An out-of-bounds write vulnerability has been identified in multiple Apple products, which could be exploited through the processing of maliciously crafted files. This flaw may result in unexpected app termination or allow for arbitrary code execution, posing risks to user security and data integrity. Apple has addressed this issue with enhanced bounds checking in several software updates, including iOS 26.6 and various macOS iterations. Users are advised to update their devices to the latest versions to mitigate potential exploitation.

Affected Version(s)

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.8

macOS 0 < 15.7.8

References

https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128068

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.