CVE-2026-84535

CVE-2026-84535 is an authorization issue in the Automator component of macOS , addressed with improved state management. The vulnerability allows an app to break out of its sandbox , with a CVSS 3.1 score of 8.2 (HIGH) — local attack vector, no privileges required, user interaction required, and ...

EUVD-2026-77936

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-43783

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-43783

CVE-2026-43783 is a race condition in macOS Tahoe that was addressed with improved locking in version 26.6 . A malicious app may be able to gain root privileges . The vulnerability requires local access with low privileges and no user interaction , and has a CVSS 3.1 score of 7.8 (HIGH) with full...

CVE-2026-64736

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84562

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...

EUVD-2026-77934

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...

CVE-2026-84562

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...

CVE-2026-86898

A logic issue in state management within Apple's web archive handling allows universal cross-site scripting (XSS) when a user opens a maliciously crafted webarchive file . The vulnerability affects Safari 27, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , and was addressed with improv...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

EUVD-2026-77929

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-65408

CVE-2026-65408 is an integer overflow in Apple's operating systems, addressed through improved input validation. The affected products include iOS , iPadOS , and macOS . The impact is a potential unexpected system termination (denial of service) triggered by a third-party app. The issue is fixed ...

EUVD-2026-77928

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination...

CVE-2026-84558

CVE-2026-84558 is a double free memory management vulnerability in macOS Golden Gate 27 . A malicious app may cause unexpected system termination , representing a denial-of-service impact with no confidentiality or integrity loss. The NVD-assigned CVSS 3.1 score is 5.5 (Medium) with a vector of A...

CVE-2026-84626

CVE-2026-84626 is an information disclosure vulnerability in Apple platforms where a malicious or third-party app could potentially identify which other apps a user has installed . The root cause was addressed through improved state management . The fix is available in iOS 26.7 and iPadOS 26.7, i...

EUVD-2026-77927

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-86924

CVE-2026-86924 is a memory corruption vulnerability in Apple platforms, addressed through improved input validation . The trigger is connecting a malicious accessory , which may cause unexpected system termination (denial of service). It affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac...

EUVD-2026-77926

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...