CSIRT Toscana

Aggiornamenti di sicurezza Apple (AL02/261027/CSIRT-ITA)

Data:
27 Ottobre 2026

Impatto Sistemico

Alto (66.41)

Sintesi

Apple ha rilasciato aggiornamenti di sicurezza per risolvere 327 nuove vulnerabilità, di cui 20 con gravità “critica” e 231 con gravità “alta”, nei prodotti iOS, iPadOS, macOS Golden Gate, macOS Tahoe, macOS Sequoia, tvOS, watchOS, visionOS e Safari.

Tipologia

  • Arbitrary Code Execution
  • Privilege Escalation
  • Authentication Bypass
  • Denial of Service
  • Security Restrictions Bypass
  • Arbitrary File Write/Read
  • Information Disclosure
  • Spoofing

Prodotti e/o versioni affette

  • iOS 27.x, versioni precedenti alla 27.2
  • iPadOS 27.x, versioni precedenti alla 27.2
  • iOS 26.x, versioni precedenti alla 26.7.2
  • iPadOS 26.x, versioni precedenti alla 26.7.2
  • iOS 18.x, versioni precedenti alla 18.7.11
  • iPadOS 18.x, versioni precedenti alla 18.7.11
  • macOS Golden Gate 27.x, versioni precedenti alla 27.2
  • macOS Tahoe 26.x, versioni precedenti alla 26.7.2
  • macOS Sequoia 15.x, versioni precedenti alla 15.8.2
  • tvOS 27.x, versioni precedenti alla 27.2
  • watchOS 27.x, versioni precedenti alla 27.2
  • visionOS 27.x, versioni precedenti alla 27.2
  • Safari 27.x, versioni precedenti alla 27.2

Azioni di mitigazione

In linea con le dichiarazioni di Apple, si raccomanda di aggiornare i prodotti vulnerabili seguendo le indicazioni dei bollettini di sicurezza riportati nella sezione Riferimenti.


Di seguito sono riportate le sole CVE relative alle vulnerabilità con gravità “critica” e “alta”:

Riferimenti

CVE

CVE-ID
CVE-2026-86992 CVE-2026-86991 CVE-2026-86990 CVE-2026-86989
CVE-2026-86988 CVE-2026-86987 CVE-2026-86986 CVE-2026-86985
CVE-2026-86978 CVE-2026-86974 CVE-2026-86973 CVE-2026-86972
CVE-2026-86969 CVE-2026-86968 CVE-2026-86964 CVE-2026-86958
CVE-2026-86954 CVE-2026-86946 CVE-2026-86945 CVE-2026-86943
CVE-2026-86942 CVE-2026-86939 CVE-2026-86936 CVE-2026-86929
CVE-2026-86925 CVE-2026-86916 CVE-2026-86896 CVE-2026-84627
CVE-2026-84605 CVE-2026-84604 CVE-2026-84599 CVE-2026-84595
CVE-2026-84590 CVE-2026-84545 CVE-2026-84539 CVE-2026-84495
CVE-2026-84494 CVE-2026-84493 CVE-2026-65397 CVE-2026-65392
CVE-2026-65385 CVE-2026-65384 CVE-2026-65373 CVE-2026-65363
CVE-2026-65350 CVE-2026-65327 CVE-2026-64767 CVE-2026-64759
CVE-2026-64750 CVE-2026-28991 CVE-2026-113952 CVE-2026-113950
CVE-2026-113949 CVE-2026-113947 CVE-2026-113946 CVE-2026-113945
CVE-2026-113944 CVE-2026-113942 CVE-2026-113941 CVE-2026-113940
CVE-2026-113938 CVE-2026-113937 CVE-2026-113936 CVE-2026-113935
CVE-2026-113934 CVE-2026-113915 CVE-2026-113914 CVE-2026-113912
CVE-2026-113910 CVE-2026-113909 CVE-2026-113908 CVE-2026-113906
CVE-2026-113904 CVE-2026-113903 CVE-2026-113901 CVE-2026-113900
CVE-2026-113899 CVE-2026-113898 CVE-2026-113897 CVE-2026-113896
CVE-2026-112707 CVE-2026-112706 CVE-2026-112705 CVE-2026-112704
CVE-2026-112701 CVE-2026-112698 CVE-2026-112697 CVE-2026-112696
CVE-2026-112695 CVE-2026-112693 CVE-2026-112692 CVE-2026-112691
CVE-2026-112690 CVE-2026-112689 CVE-2026-112688 CVE-2026-112687
CVE-2026-112686 CVE-2026-112685 CVE-2026-112684 CVE-2026-112683
CVE-2026-112682 CVE-2026-112681 CVE-2026-112679 CVE-2026-112678
CVE-2026-112677 CVE-2026-112676 CVE-2026-112673 CVE-2026-112671
CVE-2026-112670 CVE-2026-112669 CVE-2026-112668 CVE-2026-112666
CVE-2026-112665 CVE-2026-112660 CVE-2026-112659 CVE-2026-112658
CVE-2026-112655 CVE-2026-112654 CVE-2026-112653 CVE-2026-112652
CVE-2026-112651 CVE-2026-112640 CVE-2026-112639 CVE-2026-112638
CVE-2026-112637 CVE-2026-112626 CVE-2026-112625 CVE-2026-112624
CVE-2026-112623 CVE-2026-112622 CVE-2026-112621 CVE-2026-112620
CVE-2026-112619 CVE-2026-112618 CVE-2026-112616 CVE-2026-112615
CVE-2026-112612 CVE-2026-112611 CVE-2026-112610 CVE-2026-112609
CVE-2026-112607 CVE-2026-112606 CVE-2026-112604 CVE-2026-112599
CVE-2026-112596 CVE-2026-112595 CVE-2026-112593 CVE-2026-112576
CVE-2026-112575 CVE-2026-112570 CVE-2026-112569 CVE-2026-112567
CVE-2026-112566 CVE-2026-112565 CVE-2026-112563 CVE-2026-112562
CVE-2026-112559 CVE-2026-112555 CVE-2026-112554 CVE-2026-112553
CVE-2026-112552 CVE-2026-112548 CVE-2026-112547 CVE-2026-112546
CVE-2026-112545 CVE-2026-112543 CVE-2026-112542 CVE-2026-112541
CVE-2026-112540 CVE-2026-112539 CVE-2026-112536 CVE-2026-112534
CVE-2026-112532 CVE-2026-112531 CVE-2026-112530 CVE-2026-112529
CVE-2026-112526 CVE-2026-112525 CVE-2026-112524 CVE-2026-112522
CVE-2026-112521 CVE-2026-112519 CVE-2026-112518 CVE-2026-112517
CVE-2026-112516 CVE-2026-112515 CVE-2026-112514 CVE-2026-112513
CVE-2026-112511 CVE-2026-112510 CVE-2026-112508 CVE-2026-112507
CVE-2026-112505 CVE-2026-112502 CVE-2026-112501 CVE-2026-112500
CVE-2026-112498 CVE-2026-112497 CVE-2026-112495 CVE-2026-112493
CVE-2026-112492 CVE-2026-112491 CVE-2026-112488 CVE-2026-112487
CVE-2026-112486 CVE-2026-112485 CVE-2026-112484 CVE-2026-112482
CVE-2026-112481 CVE-2026-112480 CVE-2026-112479 CVE-2026-112478
CVE-2026-112477 CVE-2026-112476 CVE-2026-112475 CVE-2026-112474
CVE-2026-112473 CVE-2026-112470 CVE-2026-112469 CVE-2026-112468
CVE-2026-112467 CVE-2026-112466 CVE-2026-112464 CVE-2026-112462
CVE-2026-112461 CVE-2026-112459 CVE-2026-112457 CVE-2026-112456
CVE-2026-112455 CVE-2026-112454 CVE-2026-112453 CVE-2026-112451
CVE-2026-112449 CVE-2026-112446 CVE-2026-112443 CVE-2026-112438
CVE-2026-112437 CVE-2026-112434 CVE-2026-112432 CVE-2026-112430
CVE-2026-112427 CVE-2026-112425 CVE-2026-112424 CVE-2026-112423
CVE-2026-112417 CVE-2026-112416 CVE-2026-112414 CVE-2026-112413
CVE-2026-112410 CVE-2022-26704 CVE-2019-5598

Change log

Versione Note Data
1.0 Pubblicato il 27-10-2026 27/10/2026

Il presente articolo è un prodotto originale di csirt.gov.it, riproposto qui a solo scopo di aumentarne la visibilità. Può essere visualizzato in versione originale al seguente link

Ultimo aggiornamento

27 Ottobre 2026, 09:40