SB20261110252 - Multiple vulnerabilities in Apple iOS 18 and iPadOS 18

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261110252

SB20261110252 - Multiple vulnerabilities in Apple iOS 18 and iPadOS 18

Published: November 10, 2026

Security Bulletin ID SB20261110252
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 6
Exploitation vector Adjecent network
Highest impact Code execution

Breakdown by Severity

Medium 17% Low 83%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 6 vulnerabilities.


1) State Issues (CVE-ID: CVE-2026-113968)

CWE-ID: CWE-371 - State Issues

CVSSv4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker on the local network to potentially disrupt the intended operation of AirPlay.

The vulnerability exists due to improper application state management in AirPlay when handling interactions over the local network. A remote attacker on the local network can interact with the affected component to potentially cause unexpected behavior through incorrectly managed application state.


2) Use after free (CVE-ID: CVE-2026-113970)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker on the local network to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in Bluetooth. A remote attacker on the local network can corrupt process memory.


3) Improper access control (CVE-ID: CVE-2026-113965)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker on the local network to potentially gain unauthorized access to protected resources.

The vulnerability exists due to improper access control in the CoreUtils component of Apple macOS when access to protected resources is handled. A remote attacker on the local network can potentially bypass access restrictions from the local network to gain unauthorized access to protected resources.


4) State Issues (CVE-ID: CVE-2026-113964)

CWE-ID: CWE-371 - State Issues

CVSSv4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker on the local network to potentially cause incorrect application behavior through weaknesses in state handling.

The vulnerability exists due to improper state management in the CoreUtils component of macOS when handling state-dependent operations. A remote attacker on the local network can interact with the affected component over the local network to potentially interfere with its intended state handling.


5) Protection mechanism failure (CVE-ID: CVE-2026-113971)

CWE-ID: CWE-693 - Protection Mechanism Failure

CVSSv4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows an attacker to bypass implemented security restrictions.

The vulnerability exists due to insufficient implementation of security measures in MediaRemote component. An attacker with physical access can pair a device with an AirPlay receiver from the lock screen.


6) State Issues (CVE-ID: CVE-2026-113969)

CWE-ID: CWE-371 - State Issues

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to potentially disrupt intended application behavior through improper state handling.

The vulnerability exists due to improper state management in the macOS rapportd component when handling application state. A local user can potentially trigger incorrect state-dependent behavior to interfere with intended application operations.


Remediation

Install update from vendor's website.

References