Apple Security Advisories
apple-security · A · active
https://support.apple.com/en-us/100100
Apple platform security releases (iOS / iPadOS / macOS / Safari), primary citation for ITW-exploited Apple 0-days (added 2026-05-08). 2026-05-08 audit: WebFetch returned dated entries iOS 26.4.2, 18.7.8, macOS Tahoe 26.4.1 (Apr 1-22 2026). | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://support.apple.com/en-us/100100 (listing) then webfetch the per-release support.apple.com/en-us/<id> URL for CVE detail. AVOID: No need for the bridge, WebFetch returns the dated listing fine. Note WebFetch's summariser may mangle a single per-release URL; take URLs from the listing verbatim.. | 2026-07-05 admiralty audit: A (HIGH->A), Apple first-party PSIRT, authoritative for its own products; keep active. WebFetch summariser truncates the listing; use the bridge `url` to read the dated release table and take per-release /en-us/<id> URLs verbatim. | 2026-07-28: WebFetch returned a truncation notice; advisory table is client-side rendered. No demotion, transport/anti-bot block, not content death.
Cited in 3 entries
Citation cadence
Citation days per ISO week (14 weeks of coverage span, total 3).
- Sekoia: an APT29-linked watering hole serves n-day iOS and Android exploit chains through compromised sites, clone domains and a one-week compromise of the Plerdy tracker; CISA lists the Apple WebKit pointer-authentication bypass CVE-2024-27834 as exploited on 2026-11-042026-11-05
- CVE-2026-86950, Apple iOS, iPadOS and macOS CoreGraphics: out-of-bounds write exploited in an extremely sophisticated attack on targeted iOS users, CISA KEV-listed (CVSS 8.8)2026-09-30
- CVE-2026-65400: macOS Screen Sharing lets a network attacker authenticate without valid credentials, the second severe defect in the same daemon in two releases2026-08-08