High Threat Security Alert (A26-08-27): Multiple Vulnerabilities in Apple Products


 

Published on: 18 August 2026

Description:

Apple has released iOS 26.6.1, iPadOS 26.6.1, iOS 18.7.10, iPadOS 18.7 and macOS Tahoe 26.6.2 to fix the vulnerabilities in various Apple devices. The list of vulnerabilities information can be found at:
https://support.apple.com/en-us/148281
https://support.apple.com/en-us/148282
https://support.apple.com/en-us/148287

Reports indicated that proof-of-concept (PoC) exploit code is publicly available for an information disclosure vulnerability (CVE-2026-3783). System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

 

Affected Systems:

  • iPhone XS and later, iPhone 11 and later
  • iPad 7th generation, 8th generation and later, Air 3rd generation and later, mini 5th generation and later, Pro 11-inch 1st generation and later, Pro 12.9-inch 3rd generation and later
  • macOS Tahoe prior to version 26.6.2

 

Impact:

Depending on the vulnerabilities exploited, a successful attack could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass or tampering on an affected system.

 

Recommendation:

Patches for affected products are available. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

The updates can be obtained through the auto-update mechanism. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://support.apple.com/en-us/148281
  • https://support.apple.com/en-us/148282
  • https://support.apple.com/en-us/148287
  • https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260818
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3783 (to CVE-2026-3784)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4424
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28947
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28958
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28973
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28979
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28984
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28990
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-28996
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39868
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39872
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39877
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43658
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43661
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43663
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43667
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43673
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43676
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43699 (to CVE-2026-43701)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43705
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43708
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43711
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43714
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43717
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43720
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43722 (to CVE-2026-43727)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43729
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43731
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43733 (to CVE-2026-43735)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43738
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43742
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43744 (to CVE-2026-43745)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43754
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43757
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43769
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43776
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43778
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43794 (to CVE-2026-43797)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43799 (to CVE-2026-43803)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43807
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43809 (to CVE-2026-43812)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43818
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43821 (to CVE-2026-43822)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64692 (to CVE-2026-64693)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64695
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64700
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64707
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64709
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64715 (to CVE-2026-64716)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64719
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64721 (to CVE-2026-64726)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64732
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64734 (to CVE-2026-64735)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64738 (to CVE-2026-64740)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64742 (to CVE-2026-64744)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64746 (to CVE-2026-64747)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64749
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64755
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64757
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64760
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64762 (to CVE-2026-64766)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64768 (to CVE-2026-64772)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64774
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64778 (to CVE-2026-64782)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64784
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64787 (to CVE-2026-64788)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65329 (to CVE-2026-65341)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65343
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65346 (to CVE-2026-65347)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65349
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65351


Tag: Apple , iOS , iPadOS , macOS
Tags