CVE-2026-86877

A path traversal issue exists in macOS Golden Gate , which was addressed through improved path validation. A malicious application could potentially delete files for which it does not have the required privileges. The fix for this vulnerability is included in macOS Golden Gate 27 . No specific ex...

CVE-2026-116581

The Seroval library (prior to version 1.6.8 ) is vulnerable to an unauthenticated Denial of Service (DoS) via the fromJSON and fromCrossJSON deserializers. The root cause is a lack of validation for a sequence node's done index; a crafted index can create an iterator that never finishes, causing ...

CVE-2026-112617

An information disclosure issue was identified in macOS Golden Gate , where an application might be able to access sensitive user data . The root cause involved flawed logic, which was addressed with improved logic . This vulnerability is fixed in version 27.2 . No specific exploit details or in-...

CVE-2026-112494

A file quarantine bypass vulnerability in macOS allows an application to bypass Gatekeeper checks. The issue was addressed by implementing additional checks. The vulnerability is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 . No specific exploit details or in-the-wild exploitation infor...

CVE-2026-112601

The vulnerability in macOS Sequoia involves an integer overflow that could allow an application to cause a denial-of-service (DoS). The root cause was addressed by implementing improved input validation . The issue is fixed in macOS Sequoia 15.8.2 . No specific exploit information or in-the-wild ...

CVE-2026-113913

An input validation issue exists in several Apple operating systems, including iOS , iPadOS , macOS , and visionOS . The vulnerability can cause the disclosure of sensitive information when processing web content. This issue is addressed in iOS 26.7.2/27.2 , iPadOS 26.7.2/27.2 , macOS Golden Gate...

CVE-2026-86973

The software components Safari 27.2 , iOS 26.7.2 , iPadOS 26.7.2 , iOS 27.2 , iPadOS 27.2 , and macOS Golden Gate 27.2 are affected by an out-of-bounds read vulnerability. The root cause is related to insufficient bounds checking, which can be triggered by processing maliciously crafted web conte...

CVE-2026-112482

An out-of-bounds write issue exists in macOS that can allow an attacker on the local network to corrupt process memory . The vulnerability was addressed by implementing improved bounds checking. This issue is fixed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No spe...

CVE-2026-112656

An out-of-bounds read vulnerability exists in several Apple platforms. Processing a maliciously crafted font may result in the disclosure of process memory . This issue has been addressed with improved bounds checking. Affected systems include iOS , iPadOS , macOS (including Golden Gate, Sequoia,...

CVE-2026-113944

An out-of-bounds read vulnerability exists in macOS Golden Gate (versions prior to 27.2) due to insufficient bounds checking. A malicious application could potentially cause unexpected system termination or read kernel memory . The issue was addressed with improved bounds checking and is fixed in...

CVE-2026-64750

An out-of-bounds write issue exists in several Apple operating systems, including iOS , iPadOS , macOS , and macOS Tahoe . The root cause is a lack of sufficient bounds checking when processing a maliciously crafted image , which may lead to memory corruption . This vulnerability is addressed in ...

CVE-2026-86978

This vulnerability affects iOS , iPadOS , macOS Golden Gate , and tvOS systems. Due to insufficient checks, an application may be able to access sensitive user data . The issue has been addressed with improved checks and is fixed in versions 27.2 for all mentioned platforms. No specific exploit i...

CVE-2026-112523

A vulnerability in macOS allows an application to potentially access user-sensitive data due to improper symlink handling . This issue is addressed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specific exploit information or in-the-wild exploitation details are p...

CVE-2026-112466

An out-of-bounds read vulnerability exists in multiple Apple operating systems due to insufficient input validation. This flaw could allow an application to cause unexpected system termination or read kernel memory . The issue has been addressed in the following versions: iOS 26.7.2, 27.2; iPadOS...

CVE-2026-112535

A race condition exists in certain macOS versions due to improper handling of symbolic links . This vulnerability could allow an application to modify protected parts of the file system . The issue is addressed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . No specifi...

CVE-2026-84545

A use after free vulnerability exists in macOS due to insufficient memory management. This flaw could allow an application with App Sandbox restrictions to escape the sandbox and execute code with root privileges . The issue is resolved in macOS Golden Gate 27 , macOS Sequoia 15.8.2 , and macOS T...

CVE-2026-112470

An out-of-bounds write vulnerability exists in multiple Apple operating systems, including iOS , iPadOS , macOS , tvOS , visionOS , and watchOS . The root cause is identified as insufficient bounds checking, which could allow an application to corrupt kernel memory or cause unexpected system term...

CVE-2026-112562

A parsing issue in the handling of directory paths affects certain macOS versions. The underlying cause is insufficient path validation, which could allow a malicious app to break out of its sandbox . This vulnerability is addressed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tah...

CVE-2026-86939

A permissions issue in macOS allows an attacker with root privileges to potentially access protected user data . The vulnerability has been addressed with additional restrictions and is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2 . No specific exploit information or in-the-wild exploit...

CVE-2026-112427

An authentication issue in macOS Golden Gate was identified, which could allow a remote attacker to achieve arbitrary code execution . The vulnerability stems from improper state management. The issue is addressed in macOS Golden Gate 27.2 . No specific exploit information or in-the-wild exploita...