Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases
Apple patched a record 200+ vulnerabilities in iOS 27 and macOS Golden Gate 27, including 20 kernel flaws; none exploited in the wild.
Apple's iOS 27 and iPadOS 27 releases fix roughly 126 security flaws, 20 of them in the kernel, while macOS Golden Gate 27 addresses 210 vulnerabilities, about 100 shared with the mobile release. macOS Tahoe 26.7 patches 153 unique CVEs, including 26 kernel defects that could cause memory corruption, privilege escalation, system termination, and information leaks. Notable fixes include CVE-2026-64752, a CoreMedia memory corruption flaw allowing iPhone compromise via a malicious image, and CVE-2022-3437, a heap buffer overflow in Heimdal Samba enabling denial-of-service. Apple states none of the patched flaws are known to be exploited in the wild.
- iOS 27/iPadOS 27 fix ~126 flaws, 20 kernel; macOS Golden Gate 27 patches 210
- CVE-2026-64752 CoreMedia memory corruption enables iPhone compromise via malicious image
- macOS Tahoe 26.7 patches 153 CVEs including 26 kernel defects
- Fixes span 90+ components including WebKit, Sandbox, TCC, and AppleKeyStore
- No exploitation in the wild reported by Apple
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-3437 | A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal | 6.5 | 4% | ||
| CVE-2026-64752 | Image Processing Memory Corruption in Apple iOS, iPadOS, macOS, visionOS | 7.3 | — |
From the original article
2 min read at securityweek.com
The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks. The post Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.