VDB

GCVE-110-NCSC-2026-370

GCVE-110-NCSC-2026-370
Advisory PublishedCVSS 5.5/10
Vulnetix · Advisory published September 15, 2026
An authentication vulnerability in the Sign In With Apple flow was resolved by enhancing state management across iOS 27, iPadOS 27, and multiple macOS versions to prevent unauthorized access to user Apple accounts.

Weaknesses (CWE)

CWE-416Use After FreeCWE-121Stack-based Buffer OverflowCWE-862Missing AuthorizationCWE-125Out-of-bounds ReadCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-787Out-of-bounds WriteCWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-642External Control of Critical State DataCWE-863Incorrect Authorization

Risk Scores

CVSS 3.1
5.5/10
Medium · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersionsPlatforms
Applevers:unknown/*

Aliases

CVE-2026-20683CVE-2026-28966CVE-2026-28968CVE-2026-28969CVE-2026-43661CVE-2026-43664CVE-2026-43674CVE-2026-43684CVE-2026-43686CVE-2026-43687CVE-2026-43688CVE-2026-43689CVE-2026-43695CVE-2026-43702CVE-2026-43715CVE-2026-43737CVE-2026-43738CVE-2026-43743CVE-2026-43785CVE-2026-64718CVE-2026-64752CVE-2026-64753CVE-2026-64756CVE-2026-64758CVE-2026-64760CVE-2026-64761CVE-2026-65329CVE-2026-65344CVE-2026-65345CVE-2026-65348CVE-2026-65354CVE-2026-65358CVE-2026-65359CVE-2026-65360CVE-2026-65377CVE-2026-65395CVE-2026-65398CVE-2026-65399CVE-2026-65402CVE-2026-65403CVE-2026-65404CVE-2026-65405CVE-2026-65406CVE-2026-65407CVE-2026-65408CVE-2026-65409CVE-2026-65410CVE-2026-65411CVE-2026-65412CVE-2026-65414CVE-2026-65415CVE-2026-84487CVE-2026-84489CVE-2026-84491CVE-2026-84492CVE-2026-84497CVE-2026-84507CVE-2026-84510CVE-2026-84511CVE-2026-84513CVE-2026-84518CVE-2026-84519CVE-2026-84521CVE-2026-84523CVE-2026-84524CVE-2026-84526CVE-2026-84527CVE-2026-84530CVE-2026-84531CVE-2026-84532CVE-2026-84533CVE-2026-84534CVE-2026-84546CVE-2026-84551CVE-2026-84552CVE-2026-84560CVE-2026-84561CVE-2026-84564CVE-2026-84566CVE-2026-84571CVE-2026-84575CVE-2026-84583CVE-2026-84593CVE-2026-84596CVE-2026-84597CVE-2026-84598CVE-2026-84600CVE-2026-84602CVE-2026-84603CVE-2026-84606CVE-2026-84607CVE-2026-84609CVE-2026-84611CVE-2026-84612CVE-2026-84615CVE-2026-84616CVE-2026-84617CVE-2026-84620CVE-2026-84621CVE-2026-84622CVE-2026-84623CVE-2026-84624CVE-2026-84625CVE-2026-84626CVE-2026-84628CVE-2026-84629CVE-2026-84630CVE-2026-84632CVE-2026-84635CVE-2026-84636CVE-2026-86869CVE-2026-86870CVE-2026-86876CVE-2026-86878CVE-2026-86879CVE-2026-86881CVE-2026-86882CVE-2026-86883CVE-2026-86884CVE-2026-86885CVE-2026-86886CVE-2026-86887CVE-2026-86888CVE-2026-86890CVE-2026-86892CVE-2026-86893CVE-2026-86895CVE-2026-86897CVE-2026-86898CVE-2026-86903CVE-2026-86904CVE-2026-86905CVE-2026-86924

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

388 records in the GCVE database · Updated September 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›