PT-2026-91544

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description An application may bypass Gatekeeper checks, which is a security feature used to ensure that only trusted software runs on the system. Recommendations Update to macOS Golden Gate 27...

PT-2026-91707

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description A malicious application may bypass clickjacking protections for secure prompts. Clickjacking is a technique where a user is tricked into clicking on a hidden or disguised element. This issue w...

CVE-2026-84558: Double Free

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination...

CVE-2026-84518: External Control of Critical State Data

This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...

CVE-2026-84517: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination...

CVE-2026-43790: Out-of-bounds Write

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

PT-2026-91705

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 Description A logic issue involving state management allows an application to bypass Gatekeeper checks. Gatekeeper is a security feature that ensures only trusted software runs on the system...

CVE-2026-65381: Missing Authorization

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

CVE-2026-43787: Protection Mechanism Failure

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information...

CVE-2026-86889: Improper Certificate Validation

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-65342: Missing Authorization

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...

CVE-2026-84491: Improper Access Control

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data...

CVE-2026-84575: Out-of-bounds Write

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2026-43788: Integer Overflow or Wraparound

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2026-84584: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-64752: Out-of-bounds Write

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing a maliciously crafted image may lead to arbitrary code execution...

PT-2026-91641

Name of the Vulnerable Software and Affected Versions macOS versions prior to Golden Gate 27 watchOS versions prior to 27 Description An information disclosure issue exists where a malicious application may be able to leak sensitive user information. This was caused by improper state management,...

CVE-2026-84625: Exposure of Sensitive Information to an Unauthorized Actor

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to fingerprint the user...

CVE-2026-86898: Improper Neutralization of Input During Web Page Generation

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Opening a maliciously crafted webarchive file may lead to universal cross-site scripting...

CVE-2026-86891: Improper Authorization

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, watchOS 27. An app may be able to access Bluetooth device information...