Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-65385

Apple Ipados: out-of-bounds write

Risk score
50/100
CVSS
7.8 v3.1
Exploit chance (30 days)
0.3%
Published
26 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination.
Affected
Apple Ipados
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Story map

Story map: Apple IpadosTHE FLAWSTHE FIXCVE-2026-65385Out-of-bounds writeCVSS 7.8 · EPSS 0%CVE-2026-112688Memory corruption can lead toremote code executionCVSS 8.8 · EPSS 1%CVE-2026-64759Integer overflow can lead toremote code executionCVSS 8.8 · EPSS 0%CVE-2026-113912Out-of-bounds readCVSS 7.1 · EPSS 0%FixCheck the linked advisory forthe concrete fix, as it is notspecified in the record.Who is exposed{'products': ['iOS', 'iPadOS','macOS Golden Gate', 'macOSSequoia', 'macOS Tahoe'],'packages': [], 'versions': ['iOS26.7', 'iPadOS 26.7', 'iOS…AMBER · PATCH THIS WEEKApple IpadosA memory corruption issue wasaddressed with improvedmemory handling. An attackercould cause an unexpected apptermination or arbitrary codeexecution by parsing a file.Where it standsNo known exploitationCONNECTS TOSame weaknessOut-of-bounds write (CWE-787)360 other warnings in 30 days →Same productEarlier Apple Ipados warnings40 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Apple Ipados: Amber, patch this week. A memory corruption issue was addressed with improved memory handling. An attacker could cause an unexpected app termination or arbitrary code execution by parsing a file.

The flaws

  • CVE-2026-65385: Out-of-bounds write (CVSS 7.8 · EPSS 0%)
  • CVE-2026-112688: Memory corruption can lead to remote code execution (CVSS 8.8 · EPSS 1%)
  • CVE-2026-64759: Integer overflow can lead to remote code execution (CVSS 8.8 · EPSS 0%)
  • CVE-2026-113912: Out-of-bounds read (CVSS 7.1 · EPSS 0%)

The fix

Fix: Check the linked advisory for the concrete fix, as it is not specified in the record.

Who is exposed: {'products': ['iOS', 'iPadOS', 'macOS Golden Gate', 'macOS Sequoia', 'macOS Tahoe'], 'packages': [], 'versions': ['iOS 26.7', 'iPadOS 26.7', 'iOS 27.2', 'iPadOS 27.2', 'macOS Golden Gate 27.2', 'macOS Sequoia 15.8.2', 'macOS Tahoe 26.7.2']}

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 7.8 high

References

Original description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, visionOS 27.2, watchOS 27.2. A buffer overflow may result in memory corruption and unexpected app termination.

Last activity 26 Oct 2026. Patch Forecast updates every hour.