61 matches found
CVE-2026-84631
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...
CVE-2026-43689
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...
EUVD-2026-78131
This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...
CVE-2026-28937
CVE-2026-28937 is a vulnerability in macOS Golden Gate 27 addressed through improved state management . The flaw allowed an application to potentially access sensitive user data , indicating a state-handling defect that could expose user information across app boundaries. The issue is fixed in ma...
EUVD-2026-78129
This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...
EUVD-2026-78128
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...
CVE-2026-84631
CVE-2026-84631 is a privilege escalation vulnerability in macOS Golden Gate 27 where a local application may be able to gain root privileges . The root cause involves insufficient entitlement checks , which were addressed in the fix. The vulnerability has a CVSS 3.1 score of 7.8 (HIGH) with a loc...
CVE-2026-84631
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be able to gain root privileges...
EUVD-2026-78124
A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data...
CVE-2026-84522
A race condition in macOS Golden Gate 27 was addressed with improved state management . According to Apple, an app may be able to access sensitive user data as a result of this flaw. The issue is fixed in macOS Golden Gate 27 , and further details are available in Apple's support advisory . No CV...
CVE-2026-86909
CVE-2026-86909 is a logic issue in macOS Golden Gate 27 that affects Gatekeeper , Apple's application verification mechanism. The root cause is a flaw in state management, which was addressed with improved state handling in the fix. The practical impact is that an app may be able to bypass Gateke...
EUVD-2026-78123
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks...
EUVD-2026-78118
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...
CVE-2026-65393
This vulnerability affects Apple Xcode and macOS Golden Gate , where a permissions issue allowed an application to access user-sensitive data through insufficient validation. The flaw was resolved with improved validation of permissions, fixing the issue in Xcode 27 and macOS Golden Gate 27 . No ...
CVE-2026-84514
CVE-2026-84514 affects macOS , where insufficient entitlement checks allowed an app to modify protected parts of the file system . The issue is resolved by adding further entitlement checks in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No public exploitation or in-the-wild...
CVE-2026-86905
Apple's Keychain component was vulnerable to a flaw that allowed an app to delete credentials stored within it. The root cause was identified as vulnerable code, which was addressed by its removal. The fix ships in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 . No publicly available e...
CVE-2026-86894
CVE-2026-86894 affects macOS Golden Gate 27 and involves a logic issue in sandbox enforcement that was addressed with improved checks. The vulnerability could allow an application to break out of its sandbox , potentially granting it access to resources or processes outside its intended isolation...
EUVD-2026-77949
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox...
CVE-2026-86898
A logic issue in state management within Apple's web archive handling allows universal cross-site scripting (XSS) when a user opens a maliciously crafted webarchive file . The vulnerability affects Safari 27, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 , and was addressed with improv...