Description
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6. A malicious app may be able to break out of its sandbox.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS and iPadOS | < 18.7.10, < 26.6 | 18.7.10 |
| Apple | macOS | < 14.8.8, < 15.7.8, < 26.6 | 14.8.8 |
| Apple | tvOS | < 26.6 | 26.6 |
Advisories 6
- WID-SEC-2026-2872 Apple Safari, macOS, iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026
- WID-SEC-2026-2543 Apple macOS (Tahoe, Sonoma und Sequoia): Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026
- WID-SEC-2026-2537 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026
- NCSC-2026-0319 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Aug 20, 2026
- NCSC-2026-0267 Kwetsbaarheden verholpen in Apple MacOS NCSC-NL (Netherlands) · Jul 28, 2026
- NCSC-2026-0266 Kwetsbaarheden verholpen in Apple iOS en iPadOS NCSC-NL (Netherlands) · Jul 28, 2026