CVE-2026-64725
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.
CVSS
7.1
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 27 jul 2026 · Última mod.: 28 jul 2026 · CWE-787
Sin historial EPSS suficiente todavía.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause a denial-of-service.
- support.apple.comhttps://support.apple.com/en-us/128066
- support.apple.comhttps://support.apple.com/en-us/128067
- support.apple.comhttps://support.apple.com/en-us/128068
- support.apple.comhttps://support.apple.com/en-us/128069
- support.apple.comhttps://support.apple.com/en-us/128070
- support.apple.comhttps://support.apple.com/en-us/128071
- support.apple.comhttps://support.apple.com/en-us/128072
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-150577.5 ALT—
———IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.14hCVE-2026-483947.8 ALT—
———Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.6hCVE-2026-483937.8 ALT—
———Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.6hCVE-2026-483927.8 ALT—
———Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.6hCVE-2026-624345.3 MED—
———A guest started with Populated on Demand enabled (PoD) can attempt to
reclaim pages which aren't regular guest RAM. This can cause corruption
of memory management state in Xen.18hCVE-2026-21047——
———Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.6h