CVE-2026-65383

CVE-2026-65383 affects macOS prior to macOS Golden Gate 27 . An application may bypass Gatekeeper checks , allowing it to evade macOS's application verification mechanism. The root cause is addressed with improved checks in the fixed release. The CVSS 3.1 score is 4.4 (Medium) with a local attack...

CVE-2026-84487

CVE-2026-84487 is an integer overflow in Apple products, addressed with improved input validation. Processing a maliciously crafted file may result in disclosure of process memory , with a high confidentiality impact but no integrity or availability impact (CVSS 6.5, MEDIUM). User interaction is ...

CVE-2026-84492

CVE-2026-84492 is a race condition in Apple products, addressed with improved state handling. An app may cause unexpected system termination (denial of service). Fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, an...

CVE-2026-84497

CVE-2026-84497 is a buffer overflow in Apple products that was addressed with improved size validation . The primary impact is that opening a maliciously crafted file may lead to unexpected process termination . The vulnerability affects a wide range of Apple platforms and is fixed in iOS 26.7/iP...

CVE-2026-84517

CVE-2026-84517 is an integer overflow vulnerability in Apple macOS , remediated through improved input validation. The impact is that a local application may trigger unexpected system termination (denial of service), with no reported confidentiality or integrity impact per the CVSS 3.1 score of 5...

CVE-2026-84536

An integer underflow in Apple's macOS SMB client component was addressed through improved input validation. The flaw is triggered when a macOS system connects to a malicious SMB server , potentially leading to unexpected system termination (denial of service). The vulnerability is fixed in macOS ...

CVE-2026-43762

CVE-2026-43762 affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, and visionOS 26.6 . The vulnerability allows an app to access user-sensitive data , and was addressed with improved checks (no further root-cause detail is provided). The CNA-assigned CVSS 3.1 score is 5.5 (Medium) with a local attac...

CVE-2026-65355

CVE-2026-65355 is an information disclosure vulnerability in Apple Private Relay , where improper state management allowed a website to determine a user's real IP address even with Private Relay enabled. The issue is rated CVSS 4.3 (Medium) with required user interaction and low confidentiality i...

CVE-2026-84552

CVE-2026-84552 is a memory handling vulnerability in Apple iOS , iPadOS , and macOS that may allow an app to cause unexpected system termination (denial of service). The NVD-assigned CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low privileges required, and no user interaction needed...

CVE-2026-84562

CVE-2026-84562 is a race condition in macOS that was resolved with additional validation in macOS Tahoe 26.6 . The vulnerability allows an application to potentially access protected user data , representing a confidentiality impact without affecting integrity or availability. The specific compon...

CVE-2026-84553

CVE-2026-84553 is a resource exhaustion issue in macOS , addressed through improved input validation . A remote attacker may be able to cause a denial-of-service , with a CVSS 3.1 base score of 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The vulnerability is fixed in macOS Golden Gate 27 , ...