CVE-2026-64759
published 2026-10-26CVE-2026-64759: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate…
PriorityP353high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.45%
39.0th percentile
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 26.7.2 | 26.7.2 |
| apple | ios_and_ipados | < 27 | 27 |
| apple | macos | < 15.8 | 15.8 |
| apple | macos | < 26.7 | 26.7 |
| apple | macos | < 27 | 27 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
An integer overflow was addressed with improved input validation.
ghsa_unreviewed·2026-10-26
CVE-2026-64759 [HIGH] CWE-190 An integer overflow was addressed with improved input validation.
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted image may lead to arbitrary code execution.
VulDB
Apple iOS/iPadOS/macOS integer overflow
vuldb·2026-10-26
CVE-2026-64759 Apple iOS/iPadOS/macOS integer overflow
A vulnerability identified as very critical has been detected in Apple iOS, iPadOS and macOS. This affects an unknown part. This manipulation causes integer overflow.
This vulnerability is tracked as CVE-2026-64759. The attack is possible to be carried out remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
2026-10-26
Published