news.mlab.sh
Back to the feed
threat-intel

Multiples vulnérabilités dans les produits Apple (15 septembre 2026)

Sep 15, 2026 · CERT-FR
HighCVSS 7.5
Summary

Multiple vulnerabilities have been discovered in Apple products, including potential remote code execution, privilege escalation, and denial-of-service attacks. These vulnerabilities span various operating systems and applications, requiring immediate attention and patching. The vulnerabilities are categorized under several CVEs, highlighting a broad security issue impacting a wide range of Apple devices.

Apple has disclosed multiple security vulnerabilities across its iOS, iPadOS, macOS, tvOS, and watchOS platforms. These vulnerabilities could be exploited to execute arbitrary code remotely, elevate privileges, and cause denial-of-service conditions. The issues range in severity and impact, requiring immediate attention and patching to mitigate potential risks.

**What happened**

Several vulnerabilities have been identified, including:

  • **Remote Code Execution (RCE):** Multiple CVEs, including CVE-2022-3437, CVE-2026-20683, CVE-2026-28899, CVE-2026-28930, CVE-2026-28934, CVE-2026-28935, CVE-2026-28937, CVE-2026-28966, CVE-2026-28968, CVE-2026-28969, CVE-2026-34979, CVE-2026-43661, CVE-2026-43664, CVE-2026-43674, CVE-2026-43677, CVE-2026-43683, CVE-2026-43684, CVE-2026-43686, CVE-2026-43687, CVE-2026-43688, CVE-2026-43689, CVE-2026-43690, CVE-2026-43691, CVE-2026-43692, CVE-2026-43695, CVE-2026-43696, CVE-2026-43697, CVE-2026-43698, CVE-2026-64712, CVE-2026-64714, CVE-2026-64715, CVE-2026-64718, CVE-2026-64736, CVE-2026-64752, CVE-2026-64753, CVE-2026-64756, CVE-2026-64758, CVE-2026-64760, CVE-2026-64761, CVE-2026-64778, CVE-2026-64779, CVE-2026-64780, CVE-2026-64781, CVE-2026-64782, CVE-2026-64784, CVE-2026-64787, CVE-2026-64788, CVE-2026-65329, CVE-2026-65330, CVE-2026-65331, CVE-2026-65332, CVE-2026-65333, CVE-2026-65334, CVE-2026-65335, CVE-2026-65336, CVE-2026-65337, CVE-2026-65338, CVE-2026-65339, CVE-2026-65340, CVE-2026-65341, CVE-2026-65342, CVE-2026-65343, CVE-2026-65344, CVE-2026-65345, CVE-2026-65346, CVE-2026-65347, CVE-2026-65348, CVE-2026-65349, CVE-2026-65351, CVE-2026-65352, CVE-2026-65354, CVE-2026-65355, CVE-2026-65358, CVE-2026-65359, CVE-2026-65360, CVE-2026-65361, CVE-2026-65362, CVE-2026-65364, CVE-2026-65365, CVE-2026-65369, CVE-2026-65371, CVE-2026-65374, CVE-2026-65375, CVE-2026-65376, CVE-2026-65377, CVE-2026-65378, CVE-2026-65379, CVE-2026-65380, CVE-2026-65381, CVE-2026-65382, CVE-2026-65383, CVE-2026-65384, CVE-2026-65385, CVE-2026-65386, CVE-2026-65387, CVE-2026-65388, CVE-2026-65389, CVE-2026-65390, CVE-2026-65391, CVE-2026-65393, CVE-2026-65395, CVE-2026-65398, CVE-2026-65399, CVE-2026-65400, CVE-2026-65401, CVE-2026-65402, CVE-2026-65403.

**Technical details**

  • **Affected products:** iOS versions prior to 26.7, iPadOS versions prior to 26.7, macOS Golden Gate versions prior to 27, macOS Sequoia versions prior to 15.8, macOS Tahoe versions prior to 26.7, Safari versions prior to 27, tvOS versions prior to 27, watchOS versions prior to 27, Xcode versions prior to 27.
  • **Attack vector:** The vulnerabilities can be exploited through various means, including network attacks, malicious websites, and compromised applications.
  • **Exploitation status:** Many of these vulnerabilities are actively being exploited in the wild.
  • **CVSS score:** The CVSS scores vary depending on the specific vulnerability, ranging from High to Critical.

**Impact**

  • **Scope:** The impact of these vulnerabilities is widespread, affecting a significant portion of Apple's user base.
  • **Real-world risk:** Exploitation of these vulnerabilities could lead to data breaches, system compromise, and denial of service.

**What to do**

  • Refer to Apple's security bulletins for detailed information and instructions on how to apply the latest security updates: [https://support.apple.com/en-us/148353](https://support.apple.com/en-us/148353), [https://support.apple.com/en-us/149034](https://support.apple.com/en-us/149034), [https://support.apple.com/en-us/149035](https://support.apple.com/en-us/149035), [https://support.apple.com/en-us/149036](https://support.apple.com/en-us/149036).
  • Ensure that all devices are running the latest version of their operating system.
  • Implement appropriate security measures to mitigate the risk of exploitation.

**Why it matters**

These vulnerabilities represent a significant security risk for Apple users. Prompt patching and proactive security measures are crucial to protect against potential attacks and maintain the integrity of Apple devices.

Read the full article at CERT-FR