Threat database

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to leak sensitive user information.

CVE-2026-84531 is an out-of-bounds write vulnerability in Apple iOS and iPadOS related to processing maliciously crafted NTLM input. This flaw may cause unexpected application termination. The issue is resolved in iOS 27 and iPadOS 27 with improved bounds checking.

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVE-2026-43695 is an authorization vulnerability in Apple iOS, iPadOS, and related operating systems that could allow an app to access sensitive user data. The issue was addressed by improved state management and fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. The vulnerability has a medium severity rating with a CVSS score of 5.5.

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected process termination or disclose process memory.

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to bypass Gatekeeper checks.

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to read arbitrary files.

CVE-2026-65359 is a high-severity vulnerability in Apple iOS and iPadOS involving an out-of-bounds read that could allow a local user to cause unexpected system termination or read kernel memory. The issue has been addressed with improved bounds checking and fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

CVE-2026-86869 is an out-of-bounds write vulnerability in Apple iOS and iPadOS that could cause unexpected app termination when processing a maliciously crafted image. The issue is addressed by improved bounds checking and fixed in iOS 26.7 and iPadOS 26.7, as well as macOS Golden Gate 27. The vulnerability has a CVSS score of 6.5, indicating medium severity, and does not impact confidentiality or integrity but affects availability by causing app crashes.

CVE-2026-84507 is a race condition vulnerability in Apple iOS and iPadOS that could allow an app to cause unexpected system termination or corrupt kernel memory. The issue affects versions prior to iOS and iPadOS 26.7 and 27, as well as macOS versions prior to 15.8 and related Apple operating systems. Apple has fixed this vulnerability in iOS 26.7 and later, iPadOS 26.7 and later, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. The vulnerability has a high severity rating with a CVSS score of 7.8. No known exploits are reported in the wild at this time.

CVE-2026-64753 is a permissions issue in Apple Safari that could allow processing of maliciously crafted web content to disclose sensitive user information. The vulnerability is fixed in Safari 27 and corresponding OS versions. It has a medium severity with a CVSS score of 6.5.

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files.

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

CVE-2026-65380 is a vulnerability in Apple macOS related to improper handling of snapshots that could allow an app to access protected user data. The issue was addressed by improving permissions logic and fixed in macOS Golden Gate 27. The vulnerability has a medium severity rating with a CVSS score of 5.5.

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted asset catalog may lead to unexpected process termination.