CVE-2026-43783

CVE-2026-43783 is a race condition in macOS Tahoe that was addressed with improved locking in version 26.6 . A malicious app may be able to gain root privileges . The vulnerability requires local access with low privileges and no user interaction , and has a CVSS 3.1 score of 7.8 (HIGH) with full...

CVE-2026-64736

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84562

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...

EUVD-2026-77934

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...

CVE-2026-84562

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data...

CVE-2026-86898

A logic issue in state management within Apple's web archive handling allows universal cross-site scripting (XSS) when a user opens a maliciously crafted webarchive file . The vulnerability affects Safari 27, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , and was addressed with improv...

CVE-2026-84519

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a disk image with maliciously crafted files may lead to unexpected system terminati...

EUVD-2026-77929

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-65408

CVE-2026-65408 is an integer overflow in Apple's operating systems, addressed through improved input validation. The affected products include iOS , iPadOS , and macOS . The impact is a potential unexpected system termination (denial of service) triggered by a third-party app. The issue is fixed ...

EUVD-2026-77928

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination...

CVE-2026-84558

CVE-2026-84558 is a double free memory management vulnerability in macOS Golden Gate 27 . A malicious app may cause unexpected system termination , representing a denial-of-service impact with no confidentiality or integrity loss. The NVD-assigned CVSS 3.1 score is 5.5 (Medium) with a vector of A...

EUVD-2026-77927

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user...

CVE-2026-84626

CVE-2026-84626 is an information disclosure vulnerability in Apple platforms where a malicious or third-party app could potentially identify which other apps a user has installed . The root cause was addressed through improved state management . The fix is available in iOS 26.7 and iPadOS 26.7, i...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-86924

CVE-2026-86924 is a memory corruption vulnerability in Apple platforms, addressed through improved input validation . The trigger is connecting a malicious accessory , which may cause unexpected system termination (denial of service). It affects iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, mac...

EUVD-2026-77926

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...

EUVD-2026-77923

This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-84553

CVE-2026-84553 is a resource exhaustion issue in macOS , addressed through improved input validation . A remote attacker may be able to cause a denial-of-service , with a CVSS 3.1 base score of 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The vulnerability is fixed in macOS Golden Gate 27 , ...

CVE-2026-84553

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service...