CVE Catalog

CVE-2026-64738

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

33th percentile - higher than 33% of all known CVEs

Summary

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Risk Assessment

The risk is that a malicious app may gain unauthorized access to data or the system, bypassing isolation mechanisms.

Recommendation

It is recommended to update iOS, iPadOS, and macOS to the patched versions as soon as possible.

Original NVD description (English source)

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to break out of its sandbox.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS