CVE-2026-84550

CVE-2026-84550 addresses a race condition in macOS that was mitigated through additional validation. The vulnerability allows an application to cause unexpected system termination (denial of service). The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No publ...

EUVD-2026-78013

An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data...

EUVD-2026-78012

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-64712

CVE-2026-64712 is a local privilege escalation vulnerability in macOS that allows an app to gain root privileges . The issue was addressed through improved checks and is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . The CVSS v3.1 score is 7.8 (HIGH) with a vector of ...

CVE-2026-64712

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-65380

CVE-2026-65380 affects macOS Golden Gate 27 . The vulnerability exists in the handling of snapshots , where insufficient permissions logic allowed an app to potentially access protected user data . The issue was resolved with improved permissions logic in the macOS Golden Gate 27 release. No CVSS...

EUVD-2026-78010

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog may lead to unexpected process...

EUVD-2026-78008

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access local network devices without user consent...

CVE-2026-84585

CVE-2026-84585 is a permissions issue in macOS (Golden Gate 27) that was addressed with improved state management. The vulnerability could allow an app to access local network devices without user consent . The root cause is described as a state management deficiency in the permissions subsystem....

CVE-2026-84497

CVE-2026-84497 is a buffer overflow in Apple platforms that was addressed with improved size validation . Opening a maliciously crafted file may lead to unexpected process termination . The affected products include iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15...

CVE-2026-84602

CVE-2026-84602 is a type confusion issue in Apple operating systems that may allow an app to cause unexpected system termination . The vulnerability was addressed with improved checks. Fixed versions include iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , mac...

CVE-2026-86900

An out-of-bounds read vulnerability in macOS Golden Gate 27 affects the handling of exFAT filesystem volumes. Mounting a maliciously crafted exFAT volume may cause unexpected system termination (denial of service) or kernel memory disclosure . The issue was addressed with improved input validatio...

EUVD-2026-78005

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...

EUVD-2026-78004

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges...

CVE-2026-64790

A path handling issue in macOS could allow a third-party app to gain elevated privileges . Apple addressed the flaw with improved path validation and fixed it in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . The vulnerability is described as a local privilege escalation vecto...

CVE-2026-65355

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

EUVD-2026-78003

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

EUVD-2026-78000

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions...

CVE-2026-84577

CVE-2026-84577 is a sandbox restriction bypass vulnerability in macOS . According to Apple, an access issue was addressed with additional sandbox restrictions, allowing an app to potentially bypass sandbox restrictions. The vulnerability is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7 . No ...

CVE-2026-84609

CVE-2026-84609 is a permissions issue in multiple Apple operating systems, addressed through improved path validation . An app may be able to modify protected system files . The fix is included in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , vision...