CVE-2026-65414

An out-of-bounds write issue exists in the Bluetooth component, which was addressed with improved bounds checking. This vulnerability affects several Apple products, including iOS 26.7/27 , iPadOS 26.7/27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and...

CVE-2026-84552

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-86884

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-65354

A permissions issue in Apple's operating systems allows a malicious application to potentially break out of its sandbox . This vulnerability has been addressed with additional restrictions and is officially fixed in iOS 27 , iPadOS 27 , and macOS Golden Gate 27 . While the vulnerability is confir...

CVE-2026-86917

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-43677

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination...

CVE-2026-43677

An out-of-bounds write issue exists in macOS , which can be triggered by connecting to a malicious WebDAV server . This vulnerability can lead to unexpected app termination . The flaw was addressed by removing the vulnerable code, and a fix is available in macOS Golden Gate 27 , macOS Sequoia 15....

CVE-2026-43677

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination...

EUVD-2026-77861

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious WebDAV server may lead to unexpected app termination...

CVE-2026-84584

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

EUVD-2026-77860

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-84584

CVE-2026-84584 is a sandbox escape vulnerability in macOS Golden Gate 27 , caused by improper handling of symlinks . An app may be able to break out of its sandbox, with a CVSS 3.1 score of 8.4 (HIGH) reflecting local attack vector, low complexity, low privileges required, and changed scope with ...

CVE-2026-65381

CVE-2026-65381 affects AppleMobileFileIntegrity and CoreTypes components in macOS. The root cause is a validation issue in entitlement verification , addressed by improved validation of the process entitlement. The impact is that a malicious app may break out of its sandbox , potentially gaining ...

EUVD-2026-78052

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-65358

A race condition was addressed with improved state handling. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination...

CVE-2026-84571

A buffer overflow vulnerability exists in the CoreUI component of Apple's operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is a lack of sufficient bounds checking when processing a maliciously crafted image , which ma...

CVE-2026-84571

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84571

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

EUVD-2026-78046

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...