CVE-2026-84525

CVE-2026-84525 is a logging issue in the ATS (Application Transport Security) component of macOS , addressed with improved data redaction. An app may be able to access user-sensitive data through insufficiently redacted log entries. The vulnerability was reported by researcher D4rthL and is rated...

CVE-2026-84526

CVE-2026-84526 is an out-of-bounds write vulnerability in Apple operating systems, triggered by processing a maliciously crafted 3D scene , leading to unexpected process termination (denial of service). The fix introduces improved bounds checking. Affected platforms and fixed versions include iOS...

CVE-2026-84536

An integer underflow in Apple's macOS SMB client component was addressed through improved input validation. The flaw is triggered when a macOS system connects to a malicious SMB server , potentially leading to unexpected system termination (denial of service). The vulnerability is fixed in macOS ...

CVE-2026-84562

CVE-2026-84562 is a race condition in macOS that was resolved with additional validation in macOS Tahoe 26.6 . The vulnerability allows an application to potentially access protected user data , representing a confidentiality impact without affecting integrity or availability. The specific compon...

CVE-2026-84571

CVE-2026-84571 is a buffer overflow in Apple's CoreUI framework, addressed with improved bounds checking. Processing a maliciously crafted image may lead to unexpected app termination (denial of service). The vulnerability affects iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and...

CVE-2026-43762

CVE-2026-43762 affects iOS 26.6, iPadOS 26.6, macOS Tahoe 26.6, and visionOS 26.6 . The vulnerability allows an app to access user-sensitive data , and was addressed with improved checks (no further root-cause detail is provided). The CNA-assigned CVSS 3.1 score is 5.5 (Medium) with a local attac...

CVE-2026-65355

CVE-2026-65355 is an information disclosure vulnerability in Apple Private Relay , where improper state management allowed a website to determine a user's real IP address even with Private Relay enabled. The issue is rated CVSS 4.3 (Medium) with required user interaction and low confidentiality i...

CVE-2026-84552

CVE-2026-84552 is a memory handling vulnerability in Apple iOS , iPadOS , and macOS that may allow an app to cause unexpected system termination (denial of service). The NVD-assigned CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low privileges required, and no user interaction needed...

CVE-2026-86902

CVE-2026-86902 is a parsing issue in the handling of directory paths in Apple macOS , addressed with improved path validation. The vulnerability allows an app to potentially access sensitive user data , with a CVSS 3.1 score of 5.5 (MEDIUM) reflecting a local attack vector, low privileges require...

CVE-2026-84553

CVE-2026-84553 is a resource exhaustion issue in macOS , addressed through improved input validation . A remote attacker may be able to cause a denial-of-service , with a CVSS 3.1 base score of 7.5 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The vulnerability is fixed in macOS Golden Gate 27 , ...