CVE-2026-64752
published 2026-09-14CVE-2026-64752: A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27…
PriorityP341high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.17%
6.3th percentile
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 27 | 27 |
| apple | ipados | < 27.0 | 27.0 |
| apple | iphone_os | < 27.0 | 27.0 |
| apple | macos | < 27 | 27 |
| apple | macos | < 27.0 | 27.0 |
| apple | visionos | < 27 | 27 |
| apple | visionos | < 27.0 | 27.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/macOS/visionOS up to 26 memory corruption
vuldb·2026-09-20·CVSS 7.3
CVE-2026-64752 [HIGH] Apple iOS/iPadOS/macOS/visionOS up to 26 memory corruption
A vulnerability described as very critical has been identified in Apple iOS, iPadOS, macOS and visionOS up to 26. This issue affects some unknown processing. Such manipulation leads to memory corruption.
This vulnerability is traded as CVE-2026-64752. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is recommended.
GHSA
A memory corruption issue was addressed by removing the vulnerable code.
ghsa_unreviewed·2026-09-14
CVE-2026-64752 [HIGH] CWE-787 A memory corruption issue was addressed by removing the vulnerable code.
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution.
No detection rules found.
No public exploits indexed.
2026-09-14
Published