Threat database

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to unexpected process termination.

CVE-2026-84619 is an out-of-bounds write vulnerability in Apple macOS that could allow an application to cause unexpected system termination or write to kernel memory. The issue was addressed by improved bounds checking and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 6.1.

CVE-2026-84530 is an information disclosure vulnerability in Apple iOS and iPadOS where an app may be able to disclose kernel memory. The issue was addressed with improved memory management and fixed in iOS and iPadOS versions 26.7 and later, as well as other Apple operating systems. The vulnerability has a low severity rating and a CVSS score of 3.3.

A vulnerability in Apple macOS allows an app to potentially gain root privileges due to insufficient entitlement checks. This issue is addressed by additional entitlement checks and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a high severity with a CVSS score of 7.8.

CVE-2026-84588 is a memory corruption vulnerability in Apple macOS that could be triggered by mounting a maliciously crafted disk image. This may lead to unexpected system termination or corruption of kernel memory. The issue was addressed by removing the vulnerable code and is fixed in macOS Golden Gate 27.

CVE-2026-84567 is a vulnerability in Apple macOS that allows an application to cause unexpected system termination. The issue is related to improper memory handling and has been addressed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a medium severity with a CVSS score of 5.5 and does not impact confidentiality or integrity but affects system availability.

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account.

CVE-2026-84635 is a logic issue in Apple Safari that could cause an unexpected process termination when processing maliciously crafted web content. The issue affects Safari versions prior to 27, including iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, and watchOS versions before 27. Apple addressed this vulnerability with improved state management in version 27 of these platforms. The vulnerability has a CVSS score of 6.5, indicating a medium severity level, and does not impact confidentiality or integrity but affects availability by causing process termination.

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause unexpected system termination.

CVE-2026-28899 is a logic flaw in Apple macOS Gatekeeper that could allow an app to bypass Gatekeeper checks. This issue has been addressed with improved checks and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.6, and macOS Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 5.5.

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

A memory corruption vulnerability in Apple macOS related to connecting to malicious WebDAV servers could allow code execution. The issue is addressed by improved validation and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. This vulnerability has a high severity with a CVSS score of 8.8.

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An app may be able to fingerprint the device.

CVE-2026-84622 is a medium severity vulnerability affecting Apple iOS and iPadOS where an app with root privileges may read uninitialized kernel memory due to a memory initialization issue. This flaw was addressed by Apple with improved memory handling and fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, and other Apple operating systems. The vulnerability does not impact confidentiality, integrity, or availability beyond the described memory read. No known exploits are reported in the wild.

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with physical access may be able to silently persist an Apple Account on an erased device.

CVE-2026-65375 is a high-severity vulnerability in Apple macOS that allows an app to cause unexpected system termination. The issue is related to insufficient authentication and has been addressed with improved authentication mechanisms. Fixed versions include macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.6.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to modify Privacy preferences.

CVE-2026-84566 is a high-severity vulnerability affecting Apple iOS and iPadOS that allows a local attacker to cause unexpected system termination or corrupt kernel memory. The issue arises from improper memory handling in the kernel. Apple has fixed this vulnerability in iOS 26.7, iOS 27, iPadOS 26.7, iPadOS 27, and macOS versions Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.