A type confusion vulnerability in Safari and related Apple operating systems was addressed through improved checks. The flaw could allow processing of maliciously crafted web content to cause memory corruption. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A vulnerability in macOS allows a malicious application to create files in protected directories. This issue has been addressed with improved checks and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An out-of-bounds write vulnerability was fixed by improved input validation in multiple Apple operating systems. The flaw could allow an app to cause unexpected system termination or corrupt kernel memory. The issue is resolved in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, and macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.
A vulnerability involving improper handling of symbolic links (symlinks) was addressed by Apple. The flaw could allow an app to modify protected parts of the file system. This issue is fixed in iOS 26.7.2 and later, iPadOS 26.7.2 and later, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
An out-of-bounds write vulnerability was fixed by improving bounds checking in several Apple operating systems. The flaw could cause unexpected app termination when processing a maliciously crafted image. The issue is resolved in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2.
CVE-2026-86929 is an out-of-bounds write vulnerability in macOS that was addressed by improved bounds checking. The flaw could allow arbitrary code execution when processing a maliciously crafted file. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A null pointer dereference vulnerability was addressed by improved input validation in multiple Apple operating systems. This flaw could allow an app to cause unexpected system termination. The issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, and watchOS 27.
An out-of-bounds read vulnerability was addressed by improved bounds checking in several Apple operating systems including iOS, iPadOS, macOS, and visionOS. The flaw could allow an application to cause a denial-of-service condition. The issue is fixed in iOS 26.7.2 and later, iPadOS 26.7.2 and later, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
A file quarantine bypass vulnerability in macOS was addressed by adding additional checks. This flaw allowed an application to bypass Gatekeeper checks, potentially undermining macOS security mechanisms. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An authorization issue affecting multiple Apple operating systems was addressed through improved state management. The flaw could allow an app to access sensitive user data. This vulnerability is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
CVE-2026-86896 is a permissions vulnerability in macOS that was addressed by adding additional restrictions. The flaw could allow a malicious application to gain root privileges. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-86916 is a use-after-free vulnerability affecting Apple operating systems including iOS, iPadOS, and macOS. The flaw allows an application to potentially execute arbitrary code with kernel privileges. This vulnerability has been addressed by improved memory management and fixed in specific versions of these OSes.
A path traversal vulnerability in macOS Golden Gate 27 was addressed by improving path validation. This flaw could allow a malicious application to delete files without having the necessary privileges. The issue is fixed in macOS Golden Gate 27.
A race condition vulnerability was addressed by adding additional validation in Apple operating systems. The flaw could allow an application to cause unexpected system termination or write to kernel memory. This issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27.
A vulnerability was addressed by adding additional entitlement checks in iOS and iPadOS. The flaw could allow an app to access sensitive user data. The issue is fixed in iOS 26.7.2, iPadOS 26.7.2, and later versions including iOS 27 and iPadOS 27.
A vulnerability in macOS allows an application to potentially disclose kernel memory. The issue was addressed by improved memory handling and fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A logging issue in certain macOS versions was addressed by improving data redaction to prevent unauthorized access to sensitive user data. The vulnerability could allow an app to access sensitive information through improperly redacted logs. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-84610 is a vulnerability in macOS where a maliciously crafted ZIP archive may bypass Gatekeeper's file quarantine checks. This issue has been addressed with additional checks in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A use after free vulnerability in macOS was addressed by improved memory management. The flaw could allow an app with App Sandbox restrictions to escape the sandbox and execute code with root privileges. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A stack buffer overflow vulnerability in macOS was addressed by improved input validation. The flaw could allow processing of a maliciously crafted audit file to corrupt process memory. Fixed versions include macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.