Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory.
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | < 26.7; < 27 |
| Apple | macOS | < 26.7; < 27 |
| Apple | tvOS | < 27 |
| Apple | visionOS | < 27 |
| Apple | watchOS | < 27 |
References
- https://support.apple.com/en-us/149034Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149035Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149036Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149037Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149038Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149041Release Notes, Vendor Advisory
- https://support.apple.com/en-us/149042Release Notes, Vendor Advisory
Timeline
- Published
- Sep 14, 2026
- Last modified
- Sep 15, 2026
- NVD status
- Analyzed