CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

EUVD-2026-78101

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox...

CVE-2026-86894

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-86894

CVE-2026-86894 is a logic issue in Apple macOS Golden Gate 27 that was resolved with improved checks, allowing a malicious app to break out of its sandbox . Apple assigned a CVSS 3.1 score of 7.5 (High) with a network vector requiring no privileges or user interaction, impacting integrity. The CI...

EUVD-2026-77949

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...

CVE-2026-86898

A logic issue in state management within Apple's web archive handling allows universal cross-site scripting (XSS) when a user opens a maliciously crafted webarchive file . The vulnerability affects Safari 27, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , and was addressed with improv...

EUVD-2026-77928

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination...

CVE-2026-84558

CVE-2026-84558 is a double free memory management vulnerability in macOS Golden Gate 27 . A malicious app may cause unexpected system termination , representing a denial-of-service impact with no confidentiality or integrity loss. The NVD-assigned CVSS 3.1 score is 5.5 (Medium) with a vector of A...

EUVD-2026-77921

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks...

CVE-2026-65383

CVE-2026-65383 affects macOS prior to macOS Golden Gate 27 . An application may bypass Gatekeeper checks , allowing it to evade macOS's application verification mechanism. The root cause is addressed with improved checks in the fixed release. The CVSS 3.1 score is 4.4 (Medium) with a local attack...

CVE-2026-43788

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2026-43788

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

EUVD-2026-77917

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents...

CVE-2026-84569

CVE-2026-84569 is an access issue in macOS Golden Gate 27 involving the system pasteboards , resolved through additional sandbox restrictions . A malicious app could potentially access sensitive user data from other applications' pasteboard content. The NVD-assigned CVSS 3.1 score is 5.5 (MEDIUM)...

EUVD-2026-77916

An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...

EUVD-2026-77915

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information...

EUVD-2026-77913

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Apple Intelligence security prompts...

CVE-2026-84601

CVE-2026-84601 is a permissions issue in the Apple Intelligence component of macOS , addressed with improved state management. The vulnerability allows an app to bypass Apple Intelligence security prompts , resulting in a high integrity impact with no confidentiality or availability impact (CVSS ...

CVE-2026-86903

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory...

CVE-2026-65376

CVE-2026-65376 is an out-of-bounds read vulnerability in macOS , addressed with improved bounds checking. An application may be able to cause unexpected system termination (i.e., a crash). The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No specific compone...