CVE-2026-65349

Published Aug 17, 2026 CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.

Analysis

Technical impact

An out-of-bounds read vulnerability was discovered in Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS that can allow a local application to trigger unexpected device termination or read kernel memory, exposing privileged information. The flaw is due to insufficient input validation and is classified as CWE-125. As a result, unauthorized access to kernel data structures may occur, potentially compromising system confidentiality and stability.

Affected Systems

Apple iOS versions prior to 26.6.1, iPadOS prior to 26.6.1, macOS Sequoia versions prior to 15.8 and macOS Tahoe prior to 26.6.2, tvOS prior to 27, visionOS prior to 27, and watchOS prior to 27 are vulnerable. All earlier releases of these operating systems are affected.

Risk and Exploitability

The CVSS score of 6.6 indicates moderate severity, while the EPSS score of less than 1 % reflects a very low likelihood of exploitation. The vulnerability is not listed in KEV. Based on the description, it is inferred that a malicious local application could trigger the out-of-bounds read by supplying specially crafted input, thus the attack surface appears to be the application level and the impact is confined to the device where the app runs.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 26.6.1

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 15.8
`0`	affected	< 26.6.2

Apple

tvOS

affected

Version	Status	Constraints
`0`	affected	< 27

Apple

visionOS

affected

Version	Status	Constraints
`0`	affected	< 27

Apple

watchOS

affected

Version	Status	Constraints
`0`	affected	< 27

Configuration 1 [-]

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

Vendor Product Versions

Apple

Ios And Ipados

Version	Status	Scheme	Platform
`[0,26.6.1)`	affected	semver	—

Apple

Macos

Version	Status	Scheme	Platform
`[0,26.6.2)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Apple security updates for iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27 to fully patch the kernel vulnerability.
If a patch cannot be applied immediately, block installation of applications from untrusted or sideloaded sources to reduce the chance of a local malicious app exploiting the flaw.
Continuously monitor device logs for unexpected kernel crashes or terminations that may signal exploitation attempts, and investigate any suspicious events promptly.

Generated by OpenCVE AI on September 21, 2026 at 07:41 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.153% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://support.apple.com/en-us/148281
https://support.apple.com/en-us/148282
https://support.apple.com/en-us/149036
https://support.apple.com/en-us/149037
https://support.apple.com/en-us/149038
https://support.apple.com/en-us/149043

History

Sep 21, 2026 8:00 AM Title updated View changes

Type	Values Removed	Values Added
Title	Kernel Memory Read via Out-Of-Bounds Read in Apple iOS, iPadOS, and macOS

Sep 14, 2026 9:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.	An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory.
References		https://support.apple.com/en-us/149036 https://support.apple.com/en-us/149037 https://support.apple.com/en-us/149038 https://support.apple.com/en-us/149043

Aug 18, 2026 8:45 PM Title updated View changes

Type	Values Removed	Values Added
Title		Kernel Memory Read via Out-Of-Bounds Read in Apple iOS, iPadOS, and macOS

Aug 18, 2026 7:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple ipados Apple iphone Os
CPEs		cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple ipados Apple iphone Os

Aug 18, 2026 6:00 PM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title	Out-of-Bounds Read Issue Allowing Kernel Memory Exposure and System Termination
Weaknesses	CWE-20 CWE-200

Aug 18, 2026 2:30 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-125
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Aug 18, 2026 12:15 AM Title updated. Weaknesses updated View changes

Type	Values Removed	Values Added
Title		Out-of-Bounds Read Issue Allowing Kernel Memory Exposure and System Termination
Weaknesses		CWE-20 CWE-200

Aug 18, 2026 12:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple ios And Ipados Apple macos
Vendors & Products		Apple Apple ios And Ipados Apple macos

Aug 17, 2026 9:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory.
References		https://support.apple.com/en-us/148281 https://support.apple.com/en-us/148282