CVE-2026-65408
published 2026-09-14CVE-2026-65408: An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
4.5th percentile
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_and_ipados | < 26.7 | 26.7 |
| apple | ios_and_ipados | < 27 | 27 |
| apple | ipados | < 26.7 | 26.7 |
| apple | iphone_os | < 26.7 | 26.7 |
| apple | macos | < 15.8 | 15.8 |
| apple | macos | < 26.7 | 26.7 |
| apple | macos | < 27 | 27 |
| apple | macos | >= 15.0 < 15.8 | 15.8 |
| apple | macos | >= 26.0 < 26.7 | 26.7 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apple iOS/iPadOS/macOS prior 26.7/27/15.8 integer overflow
vuldb·2026-09-19·CVSS 5.5
CVE-2026-65408 [MEDIUM] Apple iOS/iPadOS/macOS prior 26.7/27/15.8 integer overflow
A vulnerability described as problematic has been identified in Apple iOS, iPadOS and macOS. Affected by this vulnerability is an unknown functionality. Such manipulation leads to integer overflow.
This vulnerability is listed as CVE-2026-65408. The attack must be carried out locally. There is no available exploit.
Upgrading the affected component is recommended.
GHSA
An integer overflow was addressed with improved input validation.
ghsa_unreviewed·2026-09-14
CVE-2026-65408 An integer overflow was addressed with improved input validation.
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.
No detection rules found.
No public exploits indexed.
2026-09-14
Published