A vulnerability identified as CVE-2026-86978 affects Apple operating systems including iOS, iPadOS, macOS Golden Gate, and tvOS. The issue could allow an app to access sensitive user data. The vulnerability has been addressed with improved checks and is fixed in version 27.2 of these operating systems.
An out-of-bounds read vulnerability was fixed by improving bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. The flaw could cause unexpected application termination when processing a maliciously crafted image. The issue is addressed in specific updated OS versions.
An out-of-bounds read vulnerability in Apple operating systems was addressed by improved input validation. Processing a maliciously crafted font could lead to disclosure of process memory. The issue is fixed in multiple Apple OS versions including iOS, iPadOS, macOS Golden Gate, Sequoia, Tahoe, tvOS, visionOS, and watchOS.
CVE-2026-86958 is a vulnerability in macOS where an attacker with memory write capability could bypass pointer authentication codes and execute arbitrary code. The issue has been addressed with improved memory handling and fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-86939 is a permissions issue in macOS that was addressed by adding additional restrictions. The vulnerability could allow an attacker with root privileges to access protected user data. The issue is fixed in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.
An authorization issue in Apple operating systems was addressed by improving state management. This vulnerability could allow an app to access sensitive user data. The issue is fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A logic issue in macOS was addressed with improved checks to prevent an app from potentially gaining root privileges. The vulnerability is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-86943 is a vulnerability in macOS Golden Gate that was addressed by improved memory handling. The flaw could allow a remote attacker to cause a denial-of-service condition. The issue is fixed in macOS Golden Gate version 27.2.
An information disclosure vulnerability in macOS was addressed by improving privacy controls. The flaw could allow an app to access sensitive user data. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A logic issue in macOS Gatekeeper was addressed by improving state management. This flaw could allow an app to bypass Gatekeeper checks. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An access control issue in Apple operating systems was fixed in versions 27.2 of iOS, iPadOS, macOS Golden Gate, and visionOS. The vulnerability could allow a malicious app to access restricted system interfaces or manipulate launch attribution.
CVE-2026-86946 is a use-after-free vulnerability in macOS that could allow an application to cause unexpected system termination or corrupt kernel memory. The issue has been addressed with improved memory management and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A buffer overflow vulnerability was addressed by improving size validation in various Apple operating systems. The flaw could be triggered by processing a maliciously crafted audio file, potentially leading to memory corruption. This issue is fixed in multiple OS versions including iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
A privacy issue in macOS was addressed through improved memory management. The vulnerability could allow an application to access sensitive user data. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A type confusion vulnerability in Safari and related Apple operating systems was addressed through improved checks. The flaw could allow processing of maliciously crafted web content to cause memory corruption. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A vulnerability in macOS allows a malicious application to create files in protected directories. This issue has been addressed with improved checks and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An out-of-bounds write vulnerability was fixed by improved input validation in multiple Apple operating systems. The flaw could allow an app to cause unexpected system termination or corrupt kernel memory. The issue is resolved in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, and macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.
A vulnerability involving improper handling of symbolic links (symlinks) was addressed by Apple. The flaw could allow an app to modify protected parts of the file system. This issue is fixed in iOS 26.7.2 and later, iPadOS 26.7.2 and later, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
An out-of-bounds write vulnerability was fixed by improving bounds checking in several Apple operating systems. The flaw could cause unexpected app termination when processing a maliciously crafted image. The issue is resolved in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2.
CVE-2026-86929 is an out-of-bounds write vulnerability in macOS that was addressed by improved bounds checking. The flaw could allow arbitrary code execution when processing a maliciously crafted file. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.