保安警報 (A26-10-58): Apple 產品多個漏洞


 

發布日期: 2026年 10月 28日

描述:

Apple 發布了 iOS 18.7.11、iPadOS 18.7.11、iOS 26.7.2、iPadOS 26.7.2、iOS 27.2、iPadOS 27.2、visionOS 27.2、macOS Golden Gate 27.2、macOS Tahoe 26.7.2、tvOS 27.2、watchOS 27.2 及 Safari 27.2 ，以應對不同 Apple 裝置的多個漏洞。有關漏洞資料的列表，請參考以下網址:
https://support.apple.com/en-us/149527
https://support.apple.com/en-us/149225
https://support.apple.com/en-us/149227
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149522
https://support.apple.com/en-us/149523
https://support.apple.com/en-us/149524
https://support.apple.com/en-us/149525
https://support.apple.com/en-us/149526

 

受影響的系統:

  • Apple Vision Pro (所有型號)
  • iPhone XS 及之後的型號、iPhone 11 及之後的型號
  • iPad 第 7 代及之後的型號、iPad Air 第 3 代 及之後的型號、iPad mini 第 5 代及之後的型號、iPad Pro 11 吋第 1 代及之後的型號、iPad Pro 12.9 吋第 4 代及之後的型號、iPad Pro 13 吋
  • macOS Golden Gate 27.2
  • macOS Sequoia 15.8.2
  • macOS Tahoe 26.7.2
  • Safari 27.2
  • tvOS 27.2
  • visionOS 27.2
  • watchOS 27.2

 

影響:

成功利用漏洞可以導致受影響的系統發生遠端執行程式碼、服務被拒絕、泄漏資訊、繞過保安限制或篡改。

 

建議:

現已有適用於受影響產品的修補程式。受影響系統的用戶應遵從供應商的建議，立即採取行動以降低風險。

用戶可透過產品本身的自動更新來獲得更新。受影響系統的用戶應遵從供應商的建議，立即採取行動以降低風險。

 

進一步資訊:

  • https://support.apple.com/en-us/149527
  • https://support.apple.com/en-us/149225
  • https://support.apple.com/en-us/149227
  • https://support.apple.com/en-us/149230
  • https://support.apple.com/en-us/149521
  • https://support.apple.com/en-us/149522
  • https://support.apple.com/en-us/149523
  • https://support.apple.com/en-us/149524
  • https://support.apple.com/en-us/149525
  • https://support.apple.com/en-us/149526
  • https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20261027
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26704
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65350
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65385
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65397
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84494 (to CVE-2026-84495)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86925
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86968
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86970 (to CVE-2026-86972)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86974
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86986
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86988
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86990 (to CVE-2026-86992)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112413 (to CVE-2026-112417)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112423
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112425
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112432
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112446
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112449
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112454 (to CVE-2026-112455)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112461
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112464
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112466
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112468 (to CVE-2026-112470)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112474
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112476 (to CVE-2026-112477)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112485 (to CVE-2026-112486)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112488
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112491
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112500 (to CVE-2026-112501)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112514 (to CVE-2026-112518)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112546
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112559 (to CVE-2026-112561)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112563
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112565 (to CVE-2026-112567)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112571
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112576
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112596
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112599
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112606
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112615 (to CVE-2026-112616)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112618 (to CVE-2026-112621)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112623 (to CVE-2026-112624)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112626 (to CVE-2026-112629)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112632
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112634
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112637 (to CVE-2026-112640)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112642
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112646
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112651 (to CVE-2026-112656)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112659 (to CVE-2026-112660)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112665
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112671
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112673
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112676
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112678 (to CVE-2026-112680)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112682 (to CVE-2026-112686)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112690 (to CVE-2026-112693)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112695 (to CVE-2026-112697)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112699
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-112706
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113896 (to CVE-2026-113898)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113901
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113903 (to CVE-2026-113904)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113907
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113909 (to CVE-2026-113910)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113912 (to CVE-2026-113913)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113915
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-113949 (to CVE-2026-113950)


標籤 : Apple , iOS , iPadOS , macOS , Safari , tvOS , visionOS , watchOS
標籤