Rodolphe BRUNETTI found several vulnerabilities, patched in the latest Apple update :

CVE in Books

Books
Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later
Impact: An app may be able to modify protected parts of the file system
Description: A race condition was addressed with improved checks.

CVE-2026-43811: Rodolphe Brunetti (@eisw0lf) of Lupus Nova

CVE in Contacts

Contacts
Available for: macOS Tahoe
Impact: An app may be able to add contacts without user authorization
Description: An authorization issue was addressed with improved validation.

CVE-2026-64746: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova, Daniel Febrero

Links

• Apple Security Advisory iOS 26.6 and iPadOS 26.6
• Apple Security Advisory macOS Tahoe 26.6
• Apple Security Advisory watchOS 26.6
• Apple Security Advisory visionOS 26.6
• NIST entry CVE-2026-43811
• NIST entry CVE-2026-64746