CVE-2026-64775: Use After Free
Accessibility. This issue was addressed through improved state management.
Other sources
Accounts Framework. This issue was addressed with improved data protection.
— Apple
Accounts. A parsing issue in the handling of directory paths was addressed with improved path validation.
— Apple
Accounts. An access issue was addressed with additional sandbox restrictions.
— Apple
afpfs. A buffer overflow was addressed with improved bounds checking.
— Apple
apache. This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.
— Apple
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.7.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 14.8.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iOS 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iPadOS 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Sequoia 15.7.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Sonoma 14.8.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Tahoe 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in tvOS 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in visionOS 26.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in watchOS 26.6 - Compensating control
Use HTTPS when sending information over the network.