CVE-2026-64735Patch(apple / ipados)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apple ipados systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters.

apple CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://support.apple.com/en-us/148287

Weakness type (CWE)

CWE-451

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ipados
iphone_os
macos
tvos

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

apple

Products

ipadosiphone_osmacostvosvisionoswatchos

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

Zubiqo@zubiqo91d
Patch
UPDATE: 🔬 Apple $AAPL releases iOS 26.6 featuring nearly 90 security fixes for iPhone users. Apple didn't detail every fix, but the patch addresses WebKit vulnerability CVE-2026-64730 that allowed UI spoofing. The update fixes Kernel flaws including CVE-2026-64735, which let remote attackers bypass network filters. An ImageIO integer overflow issue was patched to prevent arbitrary code execution from malicious images. And Anthropic's Claude AI agent was credited with discovering security flaw CVE-2026-64757. AI bug hunting is accelerating patch cadences so fast that security teams are stuck in perpetual maintenance mode.
Post summary
Apple’s iOS 26.6 release patches several CVEs, including UI spoofing and kernel flaws, with technical details provided, but no PoC or active exploitation evidence is mentioned.
00000242
125 followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	ipados	-	-	-
OS	apple	iphone_os	-	-	-
OS	apple	macos	-	-	-
OS	apple	tvos	-	-	-
OS	apple	visionos	-	-	-
OS	apple	watchos	-	-	-

Explore more

Back to dashboard apple CVEs ipados vulnerabilities