CVE-2026-65378

CVE-2026-65378 is an authorization issue in macOS , addressed through improved state management . According to the provided documents, an app may be able to access sensitive user data due to this flaw. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No exp...

EUVD-2026-78039

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account...

CVE-2026-20683

CVE-2026-20683 is an authentication vulnerability in Apple's Sign In With Apple flow, caused by improper state management . The flaw allows a malicious app to potentially access a user's Apple Account through the Sign In With Apple authentication mechanism. The issue affects multiple Apple platfo...

EUVD-2026-78038

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to an unexpected process termination...

CVE-2026-84635

A logic issue related to state management in Apple's Safari and multiple operating systems can lead to unexpected process termination when processing maliciously crafted web content. The vulnerability affects Safari , iOS , iPadOS , macOS , tvOS , visionOS , and watchOS , all fixed in their respe...

EUVD-2026-78033

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device...

CVE-2026-84623

CVE-2026-84623 is an authorization issue in Apple's iOS and iPadOS , addressed through improved state management . The impact is that a third-party app may be able to fingerprint the device , representing a privacy-related weakness rather than a traditional code-execution flaw. The issue is fixed...

EUVD-2026-78024

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-43695

CVE-2026-43695 is an authorization issue in Apple's operating systems, addressed through improved state management . The vulnerability allows an app to potentially access sensitive user data . The issue affects a broad range of Apple platforms: iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequo...

EUVD-2026-78008

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...

CVE-2026-84585

CVE-2026-84585 is a permissions issue in macOS (Golden Gate 27) that was addressed with improved state management. The vulnerability could allow an app to access local network devices without user consent . The root cause is described as a state management deficiency in the permissions subsystem....

CVE-2026-65355

CVE-2026-65355 is an information disclosure vulnerability in Apple Private Relay , where improper state management allowed a website to determine a user's real IP address even with Private Relay enabled. The issue is rated CVSS 4.3 (Medium) with required user interaction and low confidentiality i...

CVE-2026-65352

CVE-2026-65352 is an information disclosure flaw in Apple's Private Relay feature, where a website may be able to determine a user's IP address even with Private Relay enabled. The issue was addressed with improved state management . Fixed versions: iOS 26.6.1 , iPadOS 26.6.1 , macOS Tahoe 26.6.2...

EUVD-2026-77988

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

CVE-2026-65352

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

CVE-2026-86911

CVE-2026-86911 affects macOS (fixed in macOS Golden Gate 27 ). The vulnerability stems from insufficient state management , allowing a malicious app to bypass clickjacking protections for secure prompts. The fix introduces improved state management. No exploitation details or in-the-wild activity...

EUVD-2026-77986

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

EUVD-2026-77975

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. A sandboxed app may be able to access the System Keychain...

CVE-2026-65369

CVE-2026-65369 is a logic issue in macOS related to Gatekeeper , addressed through improved state management. The vulnerability allows a malicious application to bypass Gatekeeper checks , Apple's mechanism for validating untrusted software. The issue is fixed in macOS Golden Gate 27 , macOS Sequ...

EUVD-2026-77971

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may bypass Gatekeeper checks...