{"history":[{"alert":0,"cve":"CVE-2026-65339","id":23365,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00152, \"percentile\": 0.04396}"},{"alert":0,"cve":"CVE-2026-65339","id":20846,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00152, \"percentile\": 0.04368}"},{"alert":0,"cve":"CVE-2026-65339","id":18957,"kind":"epss","observed_at":1794306001,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00152, \"percentile\": 0.04349}"},{"alert":1,"cve":"CVE-2026-65339","id":18884,"kind":"cna","observed_at":1794306001,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"LOCAL\", \"availabilityImpact\": \"NONE\", \"baseScore\": 5, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2026-65339\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-08-18T13:27:42.863402Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-693\", \"description\": \"CWE-693 Protection Mechanism Failure\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-08-18T13:28:40.412Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"iOS and iPadOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"18.7.11\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"26.6.1\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"macOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"15.8\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}, {\"lessThan\": \"26.6.2\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"tvOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"27\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"visionOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"27\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}, {\"product\": \"watchOS\", \"vendor\": \"Apple\", \"versions\": [{\"lessThan\": \"27\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"An app may be able to leak sensitive user information\", \"lang\": \"en\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-10-26T20:38:16.842Z\", \"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\"}, \"references\": [{\"url\": \"https://support.apple.com/en-us/148281\"}, {\"url\": \"https://support.apple.com/en-us/148282\"}, {\"url\": \"https://support.apple.com/en-us/149036\"}, {\"url\": \"https://support.apple.com/en-us/149037\"}, {\"url\": \"https://support.apple.com/en-us/149038\"}, {\"url\": \"https://support.apple.com/en-us/149043\"}, {\"url\": \"https://support.apple.com/en-us/149225\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"assignerShortName\": \"apple\", \"cveId\": \"CVE-2026-65339\", \"datePublished\": \"2026-08-17T21:30:27.897Z\", \"dateReserved\": \"2026-07-22T00:45:26.179Z\", \"dateUpdated\": \"2026-10-26T20:38:16.842Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"18.7.11","status":"affected","version":"0","versionType":"custom"},{"lessThan":"26.6.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"15.8","status":"affected","version":"0","versionType":"custom"},{"lessThan":"26.6.2","status":"affected","version":"0","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"27","status":"affected","version":"0","versionType":"custom"}]},{"product":"visionOS","vendor":"Apple","versions":[{"lessThan":"27","status":"affected","version":"0","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"27","status":"affected","version":"0","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"}},{"other":{"content":{"id":"CVE-2026-65339","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-08-18T13:27:42.863402Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-693","description":"CWE-693 Protection Mechanism Failure","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-08-18T13:28:40.412Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"iOS and iPadOS","vendor":"Apple","versions":[{"lessThan":"18.7.11","status":"affected","version":"0","versionType":"custom"},{"lessThan":"26.6.1","status":"affected","version":"0","versionType":"custom"}]},{"product":"macOS","vendor":"Apple","versions":[{"lessThan":"15.8","status":"affected","version":"0","versionType":"custom"},{"lessThan":"26.6.2","status":"affected","version":"0","versionType":"custom"}]},{"product":"tvOS","vendor":"Apple","versions":[{"lessThan":"27","status":"affected","version":"0","versionType":"custom"}]},{"product":"visionOS","vendor":"Apple","versions":[{"lessThan":"27","status":"affected","version":"0","versionType":"custom"}]},{"product":"watchOS","vendor":"Apple","versions":[{"lessThan":"27","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information."}],"problemTypes":[{"descriptions":[{"description":"An app may be able to leak sensitive user information","lang":"en"}]}],"providerMetadata":{"dateUpdated":"2026-10-26T20:38:16.842Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"url":"https://support.apple.com/en-us/148281"},{"url":"https://support.apple.com/en-us/148282"},{"url":"https://support.apple.com/en-us/149036"},{"url":"https://support.apple.com/en-us/149037"},{"url":"https://support.apple.com/en-us/149038"},{"url":"https://support.apple.com/en-us/149043"},{"url":"https://support.apple.com/en-us/149225"}]}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2026-65339","datePublished":"2026-08-17T21:30:27.897Z","dateReserved":"2026-07-22T00:45:26.179Z","dateUpdated":"2026-10-26T20:38:16.842Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794435601,"cve":"CVE-2026-65339","description":"A logic issue was addressed with improved checks. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to leak sensitive user information.","epss":{"date":"2026-11-12","epss":0.00152,"percentile":0.04396},"epss_checked":1794522003,"first_seen":1794290462,"kev":null,"kev_checked":1794522003,"products":"Apple iOS and iPadOS, Apple macOS, Apple tvOS, Apple visionOS, Apple watchOS","references":["https://support.apple.com/en-us/148281","https://support.apple.com/en-us/148282","https://support.apple.com/en-us/149036","https://support.apple.com/en-us/149037","https://support.apple.com/en-us/149038","https://support.apple.com/en-us/149043","https://support.apple.com/en-us/149225"],"score":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"CVE-2026-65339","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://cybersecuritynews.com/apple-fix-for-coregraphics-0-day-flaw/","id":298,"publisher":"Cyber Security News","title":"Apple Released Patches for Exploited CoreGraphics 0-day Vulnerability for Older iPhones"}]}