CVE-2026-64735
Medium · 6.5CVSS
6.5
EPSS
0.5%
Published
Jul 27, 2026
CISA due date
—
The record
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87649 UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a… CWE-451
- CVE-2026-87653 UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36… CWE-451
- CVE-2026-87635 UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-451
- CVE-2026-87624 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36… CWE-451
- CVE-2026-87597 UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36… CWE-451
- CVE-2026-87583 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36… CWE-451
- CVE-2026-87567 UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a… CWE-451
- CVE-2026-87559 UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-451