Multiple critical vulnerabilities including remote code execution found in Apple HomeView Software before version 27.2
Multiple serious security vulnerabilities have been discovered in Apple HomeView Software versions prior to 27.2, including remote code execution (RCE), data confidentiality and integrity breaches, and security policy bypass. These flaws allow attackers to execute arbitrary code remotely and compromise data trustworthiness. Apple has released security bulletin 149851 on November 12, 2026, addressing these issues with patches. The affected software should be updated immediately to mitigate the risks associated with CVE-2026-111497 and related CVEs. The vulnerabilities were officially disclosed by the French CERT-FR advisories referencing Apple's security bulletin and CVE database entries.
Entenda a falha
A vulnerabilidade
Apple HomeView Software versions before 27.2 contain multiple vulnerabilities, tracked as CVE-2026-111497, CVE-2026-113960, CVE-2026-113961, CVE-2026-113963, CVE-2026-113964, CVE-2026-113965, CVE-2026-113968, CVE-2026-113969 and CVE-2026-113970. CERT-FR says some of them let an attacker execute arbitrary code remotely, breach data confidentiality and breach data integrity. A security policy bypass is also listed. The sources do not say which CVE maps to which impact, nor what access, authentication or user interaction an attacker needs. Apple's security bulletin 149851 of November 12, 2026 provides the fixes, and version 27.2 is the fixed release.
Como foi descoberta
The articles do not say who found the flaws or how. They only say that Apple published security bulletin 149851 on November 12, 2026, and that the French CERT-FR issued advisory CERTFR-2026-AVI-1526 on November 13, 2026 pointing to the vendor bulletin and the CVE records for the fixes.
Explicação gerada por IA a partir da matéria e dos artigos, em 13/11/2026 12:18.
Linha do tempo
-
Multiple critical vulnerabilities including remote code execution found in Apple HomeView Software before version 27.2
ler a análise desta fonte ocultar
Multiple serious security vulnerabilities have been discovered in Apple HomeView Software versions prior to 27.2, including remote code execution (RCE), data confidentiality and integrity breaches, and security policy bypass. These flaws allow attackers to execute arbitrary code remotely and compromise data trustworthiness. Apple has released security bulletin 149851 on November 12, 2026, addressing these issues with patches. The affected software should be updated immediately to mitigate the risks associated with CVE-2026-111497 and related CVEs. The vulnerabilities were officially disclosed by the French CERT-FR advisories referencing Apple's security bulletin and CVE database entries.