Pinned Loading

1. CVE-2026-20687-AppleJPEGDriver-UAF CVE-2026-20687-AppleJPEGDriver-UAF Public

   CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

   Objective-C 18 3

2. CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions Public

   UAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.

   Objective-C 12 3

3. AppleKeyStore-close-UAF AppleKeyStore-close-UAF Public

   AppleKeyStoreUserClient close() UAF — PoC + diff analysis (bug found/patched by unknown third party in iOS 26.3 RC, not my discovery)

   Objective-C 27 8

4. SEP-Exhaustion-Kernel-Panic SEP-Exhaustion-Kernel-Panic Public

   SEP firmware panic via AppleKeyStore - iOS/macOS 26.x kernel vulnerability

   Objective-C 26 3

5. CVE-2026-20637-AppleSEPKeyStore-UAF CVE-2026-20637-AppleSEPKeyStore-UAF Public

   CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

   Objective-C 54 7

6. WebKit-UAF-ANGLE-OOB-Analysis WebKit-UAF-ANGLE-OOB-Analysis Public

   Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

   HTML 100 20