2026年11月10日星期二

Apple Products Multiple Vulnerabilities

Apple Products Multiple Vulnerabilities

Release Date: 10 Nov 2026

Multiple vulnerabilities were identified in Apple Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, security restriction bypass, sensitive information disclosure and remote code execution on the targeted system.

 

Note:

CVE-2026-111497 is being exploited in the wild. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Hence, the risk level is rated as Extremely High Risk.


Impact

  • Denial of Service
  • Remote Code Execution
  • Information Disclosure
  • Security Restriction Bypass

System / Technologies affected

  • Versions prior to iOS 27.2.1 and iPadOS 27.2.1
  • Versions prior to iOS 26.7.3 and iPadOS 26.7.3
  • Versions prior to iOS 18.7.12 and iPadOS 18.7.12
  • Versions prior to macOS Golden Gate 27.2.1
  • Versions prior to macOS Tahoe 26.7.3
  • Versions prior to macOS Sequoia 15.8.3
  • Versions prior to watchOS 27.2.1
  • Versions prior to watchOS 26.6.1
  • Versions prior to visionOS 27.2.1

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

 

  • iOS 27.2.1 and iPadOS 27.2.1
  • iOS 26.7.3 and iPadOS 26.7.3
  • iOS 18.7.12 and iPadOS 18.7.12
  • macOS Golden Gate 27.2.1
  • macOS Tahoe 26.7.3
  • macOS Sequoia 15.8.3
  • watchOS 27.2.1
  • watchOS 26.6.1
  • visionOS 27.2.1

Vulnerability Identifier


Source


Related Link

 


沒有留言:

發佈留言

蘋果產品多個漏洞

蘋果產品多個漏洞 發佈日期 : 2026 年 11 月 10 日 於蘋果產品發現多個漏洞。遠端攻擊者可利用這些漏洞,於目標系統觸發阻斷服務狀況、繞過保安限制、敏感資料洩露及遠端執行任意程式碼。   注意: CVE-2026-111497 正被廣泛利用。 Goo...