# CERT-FR Flags Multiple Apple Product Vulnerabilities

Published: 2026-11-10 · Severity: high · Sectors: Technology
Canonical: https://vorant.io/reports/f302e7f9-57a5-5548-a192-8a1cf992083b/cert-fr-flags-multiple-apple-product-vulnerabilities
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> CERT-FR advisory lists multiple vulnerabilities across iOS, iPadOS, macOS, watchOS and visionOS requiring updates to latest versions.

Source: cert.cyber.gouv.fr — https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1487

## What to check

- Applies to: The 10 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: CISA lists CVE-2026-111497 as exploited in the wild.

CERT-FR published an advisory consolidating multiple Apple security bulletins dated 9 November 2026, covering vulnerabilities across iOS, iPadOS, macOS (Golden Gate, Sequoia, Tahoe), visionOS and watchOS. The flaws can lead to breaches of data confidentiality and integrity, as well as bypass of security policy mechanisms. No evidence of active exploitation is mentioned in the advisory.

Affected versions span iOS/iPadOS prior to 18.7.12, 26.7.3, and 27.2.1; macOS Sequoia prior to 15.8.3; macOS Tahoe prior to 26.7.3; macOS Golden Gate prior to 27.2.1; watchOS prior to 26.6.1 and 27.2.1; and visionOS prior to 27.2.1. Ten CVEs are referenced (CVE-2026-111497, CVE-2026-113960, CVE-2026-113961, CVE-2026-113963 through CVE-2026-113965, CVE-2026-113968 through CVE-2026-113971) without detailed technical descriptions in the advisory text itself.

Defenders managing Apple device fleets should prioritize patching to the versions specified above. Full technical details and patches are available via Apple's own security bulletins linked in the advisory. This is a routine CERT-FR vulnerability bulletin aggregating vendor patches rather than a report of active exploitation.

## Mentioned in this report

- Vulnerabilities: CVE-2026-111497 (KEV), CVE-2026-113960, CVE-2026-113961, CVE-2026-113963, CVE-2026-113964, CVE-2026-113965, CVE-2026-113968, CVE-2026-113969, CVE-2026-113970, CVE-2026-113971

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1487

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/f302e7f9-57a5-5548-a192-8a1cf992083b/cert-fr-flags-multiple-apple-product-vulnerabilities.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup