Is CVE-2026-64759 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-64759 being exploited in the wild.

How severe is CVE-2026-64759?

High severity, with a CVSS score of 8.8, published 26 October 2026.

Which products and versions are affected?

Apple Ios prior to 27; Apple iPadOS prior to 27; Apple macOS Golden Gate prior to 27; Apple macOS Sequoia prior to 15.8; and 1 more.

Is there a fix for CVE-2026-64759?

Yes: fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-64759 attacked?

It is attacked over the network.

Am I affected by CVE-2026-64759?

Check whether you run Apple Ios, Apple iPadOS, Apple macOS Golden Gate or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-64759: Apple iOS integer overflow in image processing

CVE-2026-64759 · Severity: high · CVSS 8.8 · Published 2026-10-26

iOS and iPadOS versions prior to 27 contain an integer overflow vulnerability in image processing code that could allow an attacker to execute arbitrary code when a user processes a maliciously crafted image. An attacker could exploit this to gain full control of an affected device, potentially accessing sensitive data, installing malware, or using the device as a pivot point for further attacks.

Technologies: Apple Ios, Apple iPadOS, Apple macOS Golden Gate, Apple macOS Sequoia. Vendors: Apple.

Quick answers

Is CVE-2026-64759 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-64759 being exploited in the wild.
How severe is CVE-2026-64759?: High severity, with a CVSS score of 8.8, published 26 October 2026.
Which products and versions are affected?: Apple Ios prior to 27; Apple iPadOS prior to 27; Apple macOS Golden Gate prior to 27; Apple macOS Sequoia prior to 15.8; and 1 more.
Is there a fix for CVE-2026-64759?: Yes: fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-64759 attacked?: It is attacked over the network.
Am I affected by CVE-2026-64759?: Check whether you run Apple Ios, Apple iPadOS, Apple macOS Golden Gate or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7

Technical details

An integer overflow vulnerability in iOS and iPadOS image processing was addressed through improved input validation. The vulnerability can be triggered by processing a specially crafted image and may lead to arbitrary code execution. The issue affects multiple Apple platforms and is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

Affected products

Apple iOS prior to 27
Apple iPadOS prior to 27
Apple macOS Golden Gate prior to 27
Apple macOS Sequoia prior to 15.8
Apple macOS Tahoe prior to 26.7

Timeline

2026-10-26: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.