Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Pages 15.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. Processing a maliciously crafted Pages document may result in unexpected termination or disclosure of process memory.
References (3)
Core 3
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/125632
Release Notes, Vendor Advisory
https://support.apple.com/en-us/125634
Release Notes, Vendor Advisory
https://support.apple.com/en-us/126255
Scores
CVSS v3
4.3
EPSS
0.0001
EPSS Percentile
3.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-125
Status
published
Products (7)
Apple/iOS and iPadOS
< 26.1
apple/ipados
< 26.1
apple/iphone_os
< 26.1
apple/macos
< 26.1
Apple/macOS
< 26.1
apple/pages
< 15.1
Apple/Pages
< 15.1
Published
Jan 28, 2026
Tracked Since
Feb 18, 2026