Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
76
Vulnerability1 · 1 read
CVE-2026-112414
Stack overflow DoS via crafted message on Apple OSes
- CVSS
- —
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
A stack overflow in Apple operating systems can be triggered by processing a maliciously crafted message and may cause a denial of service. The issue was fixed with improved input validation. Affected systems are those still running iOS, iPadOS, macOS, or visionOS builds earlier than the versions Apple lists as fixed.
What to do: Install Apple’s updates: iOS and iPadOS 26.7.2 or 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, macOS Golden Gate 27.2, and visionOS 27.2.
| Product | Affected | Fixed in |
|---|---|---|
| Apple iOS | — | 26.7.2, 27.2 |
| Apple iPadOS | — | 26.7.2, 27.2 |
| Apple macOS Golden Gate | — | 27.2 |
| Apple macOS Sequoia | — | 15.8.2 |
| Apple macOS Tahoe | — | 26.7.2 |
| Apple visionOS | — | 27.2 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, visionOS 27.2. Processing a maliciously crafted message may lead to a denial-of-service.