保安警报 (A26-10-58): Apple 产品多个漏洞


 

发布日期: 2026年 10月 28日

描述:

Apple 发布了 iOS 18.7.11、iPadOS 18.7.11、iOS 26.7.2、iPadOS 26.7.2、iOS 27.2、iPadOS 27.2、visionOS 27.2、macOS Golden Gate 27.2、macOS Tahoe 26.7.2、tvOS 27.2、watchOS 27.2 及 Safari 27.2 ，以应对不同 Apple 装置的多个漏洞。有关漏洞资料的列表，请参考以下网址:
https://support.apple.com/en-us/149527
https://support.apple.com/en-us/149225
https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523
https://support.apple.com/en-us/149524
https://support.apple.com/en-us/149525
https://support.apple.com/en-us/149526

 

受影响的系统:

  • Apple Vision Pro (所有型号)
  • iPhone XS 及之后的型号、iPhone 11 及之后的型号
  • iPad 第 7 代及之后的型号、iPad Air 第 3 代 及之后的型号、iPad mini 第 5 代及之后的型号、iPad Pro 11 吋第 1 代及之后的型号、iPad Pro 12.9 吋第 4 代及之后的型号、iPad Pro 13 吋
  • macOS Golden Gate 27.2
  • macOS Sequoia 15.8.2
  • macOS Tahoe 26.7.2
  • Safari 27.2
  • tvOS 27.2
  • visionOS 27.2
  • watchOS 27.2

 

影响:

成功利用漏洞可以导致受影响的系统发生远端执行程式码、服务被拒绝、泄漏资讯、绕过保安限制或篡改。

 

建议:

现已有适用于受影响产品的修补程式。受影响系统的用户应遵从供应商的建议，立即採取行动以降低风险。

用户可透过产品本身的自动更新来获得更新。受影响系统的用户应遵从供应商的建议，立即採取行动以降低风险。

 

进一步资讯:

  • https://support.apple.com/en-us/149527
  • https://support.apple.com/en-us/149225
  • https://support.apple.com/en-us/149227
  • https://support.apple.com/en-us/149230
  • https://support.apple.com/en-us/149521
  • https://support.apple.com/en-us/149522
  • https://support.apple.com/en-us/149523
  • https://support.apple.com/en-us/149524
  • https://support.apple.com/en-us/149525
  • https://support.apple.com/en-us/149526
  • https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261027
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26704
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65350
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65385
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65397
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84494 (to CVE-2026-84495)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86925
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86968
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86970 (to CVE-2026-86972)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86974
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86986
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86988
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86990 (to CVE-2026-86992)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112413 (to CVE-2026-112417)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112423
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112425
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112432
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112446
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112449
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112454 (to CVE-2026-112455)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112461
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112464
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112466
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112468 (to CVE-2026-112470)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112474
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112476 (to CVE-2026-112477)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112485 (to CVE-2026-112486)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112488
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112500 (to CVE-2026-112501)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112514 (to CVE-2026-112518)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112546
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112559 (to CVE-2026-112561)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112563
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112565 (to CVE-2026-112567)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112571
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112576
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112596
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112599
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112606
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112615 (to CVE-2026-112616)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112618 (to CVE-2026-112621)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112623 (to CVE-2026-112624)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112626 (to CVE-2026-112629)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112632
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112634
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112637 (to CVE-2026-112640)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112642
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112646
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112651 (to CVE-2026-112656)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112659 (to CVE-2026-112660)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112665
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112671
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112673
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112676
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112678 (to CVE-2026-112680)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112682 (to CVE-2026-112686)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112690 (to CVE-2026-112693)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112695 (to CVE-2026-112697)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112699
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112706
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113896 (to CVE-2026-113898)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113901
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113903 (to CVE-2026-113904)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113907
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113909 (to CVE-2026-113910)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113912 (to CVE-2026-113913)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113915
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113949 (to CVE-2026-113950)


标签 : Apple , iOS , iPadOS , macOS , Safari , tvOS , visionOS , watchOS
标签