CVE-2026-64788: medium-severity vulnerability in Apple macOS
Published · Updated
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.4epss 0.3%
from disclosure to weapon16 days
Published on NVDAug 17
1st PoC+16d
exploitation probability
0.3%top 84% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to memory corruption.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
public PoCs found — 2
githubgithub.com/ByteV0rtex/CVE-2026-64788★ 5githubgithub.com/AmorCool/iOS26.6-CVE-2026-64788★ 1⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Apple macOS
In the same product, most dangerous first.