MeridianMeridian

Apple Patches 10 Vulnerabilities Including Bluetooth and AirPlay Pairing Flaws Across iOS, macOS and Other Platforms

Apple released security updates on Monday for iOS, iPadOS, macOS, watchOS and visionOS addressing ten vulnerabilities, five of which affect Bluetooth and AirPlay pairing mechanisms. The updates cover multiple versions including iOS and iPadOS 27.2.1, 26.7.3 and 18.7.12 along with corresponding releases for macOS Golden Gate, Tahoe and Sequoia. Three of the pairing-related issues allow attackers within Bluetooth range to bypass rate limits on pairing code attempts and potentially pair devices without user interaction. Additional fixes address two Messages vulnerabilities that could let remote attackers join iMessage group chats or expose prior conversation history, plus the Brotli Node2Shell flaw that has been exploited in the wild. Platform-specific issues include an App Intents authorization bypass and a lock-screen AirPlay pairing problem on older iPhones and iPads. None of the flaws are confirmed to be under active exploitation against Apple products at the time of disclosure.

SecurityWeekTranslated from English

Read at source

Apple on Monday released security updates for iOS, iPadOS, macOS, watchOS and visionOS to patch 10 vulnerabilities, half of them related to Bluetooth and AirPlay pairing.

Five of the flaws are addressed in all nine releases: iOS and iPadOS 27.2.1, 26.7.3 and 18.7.12; macOS Golden Gate 27.2.1, Tahoe 26.7.3 and Sequoia 15.8.3; watchOS 27.2.1 and 26.6.1; and visionOS 27.2.1.

Three of the five involve the limit on pairing code guesses. CVE-2026-113968, an AirPlay bug, may be exploitable from Bluetooth range, while CVE-2026-113969, found in the rapportd component, requires the attacker to be on the same network and concerns AirPlay pairing codes. The third, CVE-2026-113964 in CoreUtils, pairs the same kind of bypass with a second impact.

“An attacker in Bluetooth range may be able to bypass the rate limit on pairing code attempts and pair with a device without user interaction,” Apple says. Another CoreUtils issue, CVE-2026-113965, is described in similar terms: “A malicious Bluetooth device may be able to establish a pairing without user interaction.” The fifth is CVE-2026-113970, a use-after-free in Bluetooth that could allow an attacker within Bluetooth range to corrupt process memory.

Two Messages vulnerabilities have been patched in many of the operating systems. One of them, CVE-2026-113961, can allow a remote attacker to join an iMessage group chat and receive its messages. The other, CVE-2026-113960, could expose a group’s earlier conversation to people added later.

The same releases also fix CVE-2026-111497, the Brotli vulnerability dubbed Node2Shell, which threat actors have targeted in the wild (although there is no indication of attacks against Apple products).

Two flaws are limited to specific platforms. CVE-2026-113963, an App Intents authorization issue that could give an app access to sensitive user information, is listed only for iOS and iPadOS 27.2.1, watchOS 27.2.1 and visionOS 27.2.1. CVE-2026-113971 appears only in the iOS and iPadOS 18.7.12 advisory, which covers iPhone XS, XS Max, XR and the seventh-generation iPad. “An attacker with physical access may be able to pair a device with an AirPlay receiver from the lock screen,” Apple explains.

AppleCVE-2026-111497BrotliCVE-2026-113968CoreUtilsNode2ShellCVE-2026-113964
ShareXFacebookLinkedInReddit
Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Vulns & Exploits

Threat Actors Exploit Openwave and Cisco BroadWorks Vulnerabilities to Steal Sensitive Telecom Data
Vulns & Exploits

Threat Actors Exploit Openwave and Cisco BroadWorks Vulnerabilities to Steal Sensitive Telecom Data

Threat actors are actively exploiting two vulnerabilities in Openwave Webtop Media Transcoder and Cisco BroadWorks to access sensitive information from communication service providers. The Openwave flaw, tracked as CVE-2026-111793, allows authenticated users to bypass file-type restrictions and convert unintended documents, potentially leading to sensitive data exposure. Patched in version 1.1.22.0 released in December 2021, the issue was added to CISA’s Known Exploited Vulnerabilities catalog on November 10. The Cisco BroadWorks vulnerability, CVE-2026-20320, is an unauthenticated blind XML external entity injection that enables remote attackers to read sensitive configuration data via the OCI-P service. Malbear Labs reported that a Chinese-speaking actor used an autonomous AI intrusion harness to target a European telecom provider and at least 13 of its customers, focusing on asset enumeration, credential theft, and subscriber record harvesting. CISA added both flaws to the KEV list with a November 24 patching deadline for federal agencies.

SecurityWeekNov 11, 2026Translated from English

Microsoft Fixes Exchange Sign-Ins Broken by October 2026 Windows Server Updates
Vulns & Exploits

Microsoft Fixes Exchange Sign-Ins Broken by October 2026 Windows Server Updates

Microsoft has resolved Outlook sign-in and mail delivery problems affecting on-premises Exchange Server systems after the installation of the October 2026 Windows Server security updates. The issues impacted systems running Windows Server 2019 and later, causing users to be unable to sign in to Outlook on the web or send emails that remained stuck in the Outbox. Microsoft traced the root cause to a new default memory limit imposed on the Endpoint Mapper when processing Endpoint Lookup calls. The company confirmed that the November 2026 Patch Tuesday updates KB5131080 and KB5131090 fully address the known issue. A temporary registry-based workaround was also provided for administrators unable to deploy the cumulative updates immediately. Microsoft emphasized that the problems were unrelated to the October 2026 Exchange Server security updates themselves.

BleepingComputerNov 11, 2026Translated from English

Intel and AMD Release Over 50 Advisories Fixing More Than 200 Vulnerabilities
Vulns & Exploits

Intel and AMD Release Over 50 Advisories Fixing More Than 200 Vulnerabilities

Intel and AMD have published more than 50 new security advisories describing over 200 vulnerabilities across their product lines. Intel issued 24 advisories covering just over 100 flaws, including three rated critical and 20 rated high severity, with the largest advisory addressing 30 issues in the TDX Migration Trust Domain reference software. AMD released 29 security bulletins and two briefs covering roughly 100 unique CVEs, none rated critical, though many mitigations were issued months or years earlier while others remain scheduled as late as 2027. Several high-severity issues affect graphics products, UEFI firmware, Secure Encrypted Virtualization, and management tools, with some tied to academic research on transient execution attacks. Intel has discontinued one affected product and advises immediate uninstallation, while AMD continues to coordinate fixes for firmware and processor components. The volume of disclosures highlights ongoing challenges in securing complex hardware and firmware ecosystems used in servers, workstations, and consumer devices.

SecurityWeekNov 11, 2026Translated from English