Out-of-Bounds Write Vulnerability in Apple's Operating Systems
CVE-2026-64770

9.8CRITICAL

Key Information:

Vendor

Apple
Status
iOS And iPad OS
Mac OS
TV OS
Visionos
Vendor
CVE Published:
27 July 2026

What is CVE-2026-64770?

Apple has addressed a critical out-of-bounds write vulnerability affecting multiple operating systems. This flaw may allow a remote attacker to exploit the issue, potentially leading to unexpected application termination or heap corruption. Users of iOS 26.6, iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, and visionOS 26.6 are urged to update their systems promptly to mitigate the risk associated with this vulnerability.

Affected Version(s)

iOS and iPadOS 0 < 18.7.10

iOS and iPadOS 0 < 26.6

macOS 0 < 14.8.8

References

https://support.apple.com/en-us/128066
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128069

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.