IT之家 9 月 15 日消息，苹果公司今天（9 月 15 日）发布 iOS / iPadOS 27 安全公告，共计修复 126 个安全漏洞，其中涵盖多个涉及平台内核的高风险难题。
在本次公开的漏洞中，IT之家附上来自中国开发者贡献的相关漏洞：
| 报告者 / 团队 | CVE | iOS 27 受影响组件 | 漏洞影响 |
|---|---|---|---|
| Ye Zhang（@VAR10CK），百度安全 | CVE-2026-65406 | BackgroundAssets | 恶意 App 可访问敏感使用者数据 |
| Ye Zhang（@VAR10CK），百度安全 | CVE-2026-65377 | Kernel | App 可导致平台异常终止；与 STAR Labs 的研究员共同报告 |
| Zhongcheng Li（CK01） | CVE-2026-86888 | App Store | 本地 App 可读取持久化账户标识符 |
| Zhongcheng Li，IES Red Team | CVE-2026-84583 | AuthKit | 本地 App 可读取持久化账户标识符 |
| Dem0ns（@天府简易信工作室） | CVE-2026-20683 | Safari |
IT之家查询公开资料，CK01 是安全研究员 Zhongcheng Li 使用的网名 / 署名；而 IES Red Team 是字节跳动（ByteDance）内部的安全攻防与漏洞研究团队。
在本次修复的漏洞中，主要包含可导致内核权限执行、绕过沙盒 / 隐私授权、远程无线攻击，以及账户与凭据泄露的漏洞，对普通使用者而言，建议尽快升级。
其中最值得关注的漏洞是 CVE-2026-84607（AVEVideoEncoder），苹果称“沙盒化 App 可能以内核权限执行任意代码”。
这意味着一个原本受 iOS 应用沙盒限制的恶意 App，理论上可能越过应用层权限边界，直接取得平台最高权限。
另外 CVE-2026-84523（APFS）允许 App 导致平台终止或写入内核内存。另外 CVE-2026-43689 等多项 Kernel 漏洞可造成内核内存损坏、读取内核内存、泄露内核内存布局，甚至让恶意 App 获取 root 权限。
本文来源：https://www.ithome.com/1/002/368.htm
若有版权问题，请来信告知：13951431913#139.com 或在右方提交评论。
Home > iPhone Home > iPhone News
Thanks to IT Home netizen "不一样的感受" for the tip submission!
IT Home reported on September 15 that Apple today (September 15) released the iOS / iPadOS 27 security advisory, fixing a total of 126 security vulnerabilities, including multiple high-risk issues involving the platform kernel.
Among the vulnerabilities disclosed this time, IT Home lists the relevant vulnerabilities contributed by Chinese developers:
According to public information checked by IT Home, CK01 is the online name / alias used by security researcher Zhongcheng Li; while IES Red Team is ByteDance's internal security offensive-defensive and vulnerability research team.
The vulnerabilities fixed this time mainly include those that can lead to kernel privilege execution, bypassing sandbox / privacy authorization, remote wireless attacks, and account and credential leakage. Ordinary users are advised to upgrade as soon as possible.
The most noteworthy vulnerability is CVE-2026-84607 (AVEVideoEncoder). Apple says "a sandboxed app may execute arbitrary code with kernel privileges."
This means a malicious app originally restricted by the iOS app sandbox could theoretically cross the application-layer permission boundary and directly gain the platform's highest privileges.
Additionally, CVE-2026-84523 (APFS) allows an app to cause the platform to terminate or write to kernel memory. Furthermore, multiple Kernel vulnerabilities such as CVE-2026-43689 can cause kernel memory corruption, read kernel memory, leak kernel memory layout, and even allow malicious apps to obtain root privileges.