A logging issue in certain macOS versions was addressed by improving data redaction to prevent unauthorized access to sensitive user data. The vulnerability could allow an app to access sensitive information through improperly redacted logs. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-84610 is a vulnerability in macOS where a maliciously crafted ZIP archive may bypass Gatekeeper's file quarantine checks. This issue has been addressed with additional checks in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A use after free vulnerability in macOS was addressed by improved memory management. The flaw could allow an app with App Sandbox restrictions to escape the sandbox and execute code with root privileges. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A stack buffer overflow vulnerability in macOS was addressed by improved input validation. The flaw could allow processing of a maliciously crafted audit file to corrupt process memory. Fixed versions include macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An out-of-bounds write vulnerability was addressed by improving bounds checking in several Apple operating systems. The flaw could allow an application to cause unexpected system termination. The issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
An out-of-bounds write vulnerability in macOS was fixed by improving bounds checking. Exploiting this flaw by mounting a maliciously crafted disk image could cause unexpected system termination or corrupt kernel memory. The issue is resolved in macOS Golden Gate 27.2 and macOS Tahoe 26.7.2.
An out-of-bounds write vulnerability in macOS was fixed by improving bounds checking. The flaw could allow a remote attacker to cause unexpected application termination or heap corruption. The issue is resolved in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A buffer overflow vulnerability was addressed by improving bounds checking in several Apple operating systems. The flaw could lead to heap corruption when processing a maliciously crafted image. The issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2, and visionOS 27.
A logic issue affecting iOS and iPadOS was addressed by improved state management. The vulnerability could allow an app to access sensitive user data. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, and all versions of iOS 27 and iPadOS 27.
An out-of-bounds write vulnerability was fixed by improving bounds checking in Apple operating systems including iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2. This flaw could allow an application to cause unexpected system termination or write to kernel memory.
A logic flaw in iOS and iPadOS could allow an attacker with physical access to the device to access contacts from the lock screen. This issue has been addressed with improved checks and fixed in iOS 26.7.2, iPadOS 26.7.2, and later versions including iOS 27 and iPadOS 27.
CVE-2026-84599 is a vulnerability affecting multiple Apple operating systems where improper memory handling could allow an app to cause unexpected system termination or corrupt kernel memory. The issue has been addressed with improved memory handling in several Apple OS versions including iOS 26.7.2, iPadOS 26.7.2, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
CVE-2026-84542 is an access control vulnerability in macOS that could allow an application to read files outside its sandbox. The issue is addressed by improved access restrictions and fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A use-after-free vulnerability was addressed through improved memory management in multiple Apple operating systems. This flaw could allow an application to cause unexpected system termination or write to kernel memory. The issue is fixed in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
An out-of-bounds write vulnerability was fixed in macOS Golden Gate 27 and macOS Tahoe 26.7.2 by improving bounds checking. This flaw could allow an application to cause unexpected system termination.
An authorization vulnerability in iOS and iPadOS was addressed by improving state management. The flaw could allow an app to read the device's name without proper authorization. This issue is fixed in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, and iPadOS 27.2.
A path traversal vulnerability in macOS Golden Gate 27 was addressed by improving path validation. This flaw could allow an application to escape its sandbox environment. The issue has been fixed in macOS Golden Gate 27.
An authorization vulnerability in macOS was addressed by improving state management. The flaw could have allowed an application to access sensitive user data. The issue is fixed in macOS Golden Gate 27 and macOS Tahoe 26.7.2.
An authorization issue in Apple operating systems was addressed by improving state management. The flaw could allow an app to access sensitive user data. The issue is fixed in multiple versions of iOS, iPadOS, macOS, and visionOS.
CVE-2026-64789 is a vulnerability in macOS where a malicious application may bypass Gatekeeper checks due to insufficient validation of file attributes. The issue has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2 by improving the validation process.