CVE-2026-84585

CVE-2026-84585 is a permissions issue in macOS (Golden Gate 27) that was addressed with improved state management. The vulnerability could allow an app to access local network devices without user consent . The root cause is described as a state management deficiency in the permissions subsystem....

CVE-2026-84497

CVE-2026-84497 is a buffer overflow in Apple platforms that was addressed with improved size validation . Opening a maliciously crafted file may lead to unexpected process termination . The affected products include iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15...

CVE-2026-84602

CVE-2026-84602 is a type confusion issue in Apple operating systems that may allow an app to cause unexpected system termination . The vulnerability was addressed with improved checks. Fixed versions include iOS 26.7/iPadOS 26.7 , iOS 27/iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , mac...

EUVD-2026-78005

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure...

CVE-2026-86900

An out-of-bounds read vulnerability in macOS Golden Gate 27 affects the handling of exFAT filesystem volumes. Mounting a maliciously crafted exFAT volume may cause unexpected system termination (denial of service) or kernel memory disclosure . The issue was addressed with improved input validatio...

EUVD-2026-78004

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain elevated privileges...

CVE-2026-64790

A path handling issue in macOS could allow a third-party app to gain elevated privileges . Apple addressed the flaw with improved path validation and fixed it in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . The vulnerability is described as a local privilege escalation vecto...

CVE-2026-65355

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

EUVD-2026-78003

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2, visionOS 26.6.1. A website may be able to determine a user's IP address with Private Relay turned on...

EUVD-2026-78000

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27, macOS Tahoe 26.7. An app may be able to bypass sandbox restrictions...

CVE-2026-84577

CVE-2026-84577 is a sandbox restriction bypass vulnerability in macOS . According to Apple, an access issue was addressed with additional sandbox restrictions, allowing an app to potentially bypass sandbox restrictions. The vulnerability is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7 . No ...

CVE-2026-84609

CVE-2026-84609 is a permissions issue in multiple Apple operating systems, addressed through improved path validation . An app may be able to modify protected system files . The fix is included in iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , vision...

CVE-2026-43684

CVE-2026-43684 is a use-after-free flaw in Apple's macOS and iOS/iPadOS, addressed through improved memory management. An app may cause unexpected system termination or kernel memory corruption . The issue is fixed in iOS 26.7 , iPadOS 26.7 , macOS Golden Gate 27 , and macOS Sequoia 15.8 . The CN...

CVE-2026-43684

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-84520

CVE-2026-84520 is a buffer overflow in macOS Golden Gate 27 , addressed through improved size validation. A local attacker may be able to cause unexpected system termination or corrupt kernel memory , indicating potential denial-of-service or integrity implications at the kernel level. The issue ...

EUVD-2026-77997

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-43692

A validation issue in macOS (fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7) was addressed through improved input sanitization . A remote user may trigger unexpected app termination or arbitrary code execution , with a CVSS 3.1 score of 8.8 (HIGH) requiring user interacti...

CVE-2026-43692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution...

EUVD-2026-77996

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote user may cause an unexpected app termination or arbitrary code execution...

CVE-2026-84536

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...