A vulnerability identified as CVE-2026-86978 affects Apple operating systems including iOS, iPadOS, macOS Golden Gate, and tvOS. The issue could allow an app to access sensitive user data. The vulnerability has been addressed with improved checks and is fixed in version 27.2 of these operating systems.
An out-of-bounds read vulnerability was fixed by improving bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The flaw could cause unexpected application termination when processing a maliciously crafted image. The issue is addressed in specific updated OS versions.
An authorization issue in Apple iOS and iPadOS was addressed by improving state management. The vulnerability could allow an app to fingerprint the user. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.
A vulnerability in Apple operating systems related to memory handling could cause unexpected app termination when processing a maliciously crafted video file. The issue has been fixed in multiple Apple OS versions including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
A vulnerability was addressed by improving access restrictions to prevent unauthorized camera access by malicious apps. The issue is fixed in multiple Apple operating system versions including iOS, iPadOS, macOS Golden Gate, macOS Tahoe, and visionOS. A malicious app could previously access the camera without user permission.
An out-of-bounds read vulnerability in Apple operating systems was addressed by improved input validation. Processing a maliciously crafted font could lead to disclosure of process memory. The issue is fixed in multiple Apple OS versions including iOS, iPadOS, macOS Golden Gate, Sequoia, Tahoe, tvOS, visionOS, and watchOS.
A use-after-free vulnerability in Safari and related Apple operating systems was addressed through improved memory management. This flaw could cause Safari to crash when processing maliciously crafted web content. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
CVE-2026-86958 is a vulnerability in macOS where an attacker with memory write capability could bypass pointer authentication codes and execute arbitrary code. The issue has been addressed with improved memory handling and fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-86939 is a permissions issue in macOS that was addressed by adding additional restrictions. The vulnerability could allow an attacker with root privileges to access protected user data. The issue is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.
An authorization issue in Apple operating systems was addressed by improving state management. This vulnerability could allow an app to access sensitive user data. The issue is fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A logic issue in macOS was addressed with improved checks to prevent an app from potentially gaining root privileges. The vulnerability is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-86943 is a vulnerability in macOS Golden Gate that was addressed by improved memory handling. The flaw could allow a remote attacker to cause a denial-of-service condition. The issue is fixed in macOS Golden Gate version 27.2.
An information disclosure vulnerability in macOS was addressed by improving privacy controls. The flaw could allow an app to access sensitive user data. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A logic issue in macOS Gatekeeper was addressed by improving state management. This flaw could allow an app to bypass Gatekeeper checks. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An access control issue in Apple operating systems was fixed in versions 27.2 of iOS, iPadOS, macOS Golden Gate, and visionOS. The vulnerability could allow a malicious app to access restricted system interfaces or manipulate launch attribution.
CVE-2026-86946 is a use-after-free vulnerability in macOS that could allow an application to cause unexpected system termination or corrupt kernel memory. The issue has been addressed with improved memory management and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A buffer overflow vulnerability was addressed by improving size validation in various Apple operating systems. The flaw could be triggered by processing a maliciously crafted audio file, potentially leading to memory corruption. This issue is fixed in multiple OS versions including iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
A privacy issue in macOS was addressed through improved memory management. The vulnerability could allow an application to access sensitive user data. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A type confusion vulnerability in Safari and related Apple operating systems was addressed through improved checks. The flaw could allow processing of maliciously crafted web content to cause memory corruption. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A vulnerability in macOS allows a malicious application to create files in protected directories. This issue has been addressed with improved checks and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.