About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 16:54 UTC

Linked CVEs50

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-86887An app may be able to bypass certain Privacy preferences
CVE-2026-84552The issue was addressed with improved memory handling
CVE-2026-84530An information disclosure issue was addressed with improved memory management
CVE-2026-84526An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-65403This issue was addressed with improved checks
CVE-2026-84626An information disclosure issue was addressed with improved state management
CVE-2026-84621An authorization issue was addressed with improved access control
CVE-2026-65399A file quarantine bypass was addressed with additional checks
CVE-2026-28966An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-65360A race condition was addressed with improved state handling
CVE-2026-86870A heap buffer overflow was addressed with improved bounds checking
CVE-2026-84532An out-of-bounds read issue was addressed with improved input validation
CVE-2026-84524An out-of-bounds read was addressed with improved bounds checking
CVE-2026-28968An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-65408An integer overflow was addressed with improved input validation
CVE-2026-65359An out-of-bounds read was addressed with improved bounds checking
CVE-2026-86869An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-84507A race condition was addressed with improved state handling
CVE-2026-86886A path traversal issue was addressed with improved input validation
CVE-2026-84602A type confusion issue was addressed with improved checks
CVE-2026-84622A memory initialization issue was addressed with improved memory handling
CVE-2026-84623An authorization issue was addressed with improved state management
CVE-2026-84566A local attacker may be able to cause unexpected system termination or corrupt kernel memory
CVE-2026-84564An uninitialized memory issue was addressed with improved memory initialization
CVE-2026-84616A type confusion issue was addressed with improved memory handling
CVE-2026-84513A privacy issue was addressed with improved private data redaction for log entries
CVE-2026-84615An authorization issue was addressed with improved state management
CVE-2026-84510A heap buffer overflow was addressed with improved bounds checking
CVE-2026-86892This issue was addressed with additional entitlement checks
CVE-2026-84620An integer overflow was addressed with improved input validation
CVE-2026-65377A memory corruption issue was addressed with improved memory handling
CVE-2026-86924A memory corruption issue was addressed with improved input validation
CVE-2026-84546An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-86890An attacker with physical access to a locked device may be able to view sensitive user information
CVE-2026-84497A buffer overflow was addressed with improved size validation
CVE-2026-84598An attacker with physical access to a trust-paired device may be able to read and write arbitrary files
CVE-2026-65348A permissions issue was addressed with additional restrictions
CVE-2026-84561A double free issue was addressed with improved memory management
CVE-2026-43702The issue was addressed with improved memory handling
CVE-2026-65344An out-of-bounds write issue was addressed with improved bounds checking
CVE-2026-65410The issue was addressed with improved checks
CVE-2026-84624A permissions issue was addressed with improved path validation
CVE-2026-86897This issue was addressed with additional entitlement checks
CVE-2026-65411A path handling issue was addressed with improved validation
CVE-2026-86881An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages
CVE-2026-65406A logic issue was addressed with improved validation
CVE-2026-65345A permissions issue was addressed with additional restrictions
CVE-2026-84583A permissions issue was addressed with additional restrictions
CVE-2026-84612An authorization issue was addressed with improved access control
CVE-2026-43684A use-after-free issue was addressed with improved memory management

Source and provenance

Original title: About the security content of iOS 26.7 and iPadOS 26.7 - Apple Support. Captured 26 Sept 2026, 16:54 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗