SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-64766

HIGH · CVSS 7.8 EPSS 0.18% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-27 · Last synced 2026-08-26

CyberRota Analysis

AI-Generated

An integer overflow vulnerability exists in unspecified Apple products, which can be exploited through the processing of a maliciously crafted file, potentially resulting in unexpected application termination or arbitrary code execution. Organizations using affected versions of iOS, iPadOS, macOS, tvOS, visionOS, or watchOS should prioritize applying the latest updates to mitigate the risk associated with this high-severity issue. Immediate action is recommended for those managing devices in enterprise environments or handling sensitive data.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-64766
Severity
HIGH
CVSS
7.8
EPSS
0.18%

Original NVD Description

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Related CVEs

Other vulnerabilities affecting the same vendor(s)