Multiple Vulnerabilities in Apple Products

Affected Environment

iOS, iPadOS (versions 15–26), macOS (Sonoma, Sequoia, Tahoe), tvOS, watchOS, and visionOS across all supported Apple devices.

Threat Overview

Extensive set of CVEs enabling DoS, sandbox escapes, kernel memory disclosure, privilege escalation, data exposure, and process crashes.

Exposure Timeline

Disclosed 12 May 2026; auto-update available; classified as Informative Cyber Alert covering medium/low severity vulnerabilities.

Attack Surface

App sandbox, kernel, WebKit web content rendering, local network interfaces, Wi-Fi stack, and physical device access vectors.

Technical Root Cause

Memory corruption, out-of-bounds reads/writes, use-after-free, improper authorisation, protection mechanism failures, and missing input validation.

Exploitation Pathway

Malicious apps, crafted media/image/web content, local network packets, or physical device access trigger vulnerable code paths.