An authorization issue in Apple operating systems was addressed by improving state management. This vulnerability could allow an app to access sensitive user data. The issue is fixed in iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A logic issue in macOS was addressed with improved checks to prevent an app from potentially gaining root privileges. The vulnerability is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
CVE-2026-86943 is a vulnerability in macOS Golden Gate that was addressed by improved memory handling. The flaw could allow a remote attacker to cause a denial-of-service condition. The issue is fixed in macOS Golden Gate version 27.2.
An information disclosure vulnerability in macOS was addressed by improving privacy controls. The flaw could allow an app to access sensitive user data. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A logic issue in macOS Gatekeeper was addressed by improving state management. This flaw could allow an app to bypass Gatekeeper checks. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An access control issue in Apple operating systems was fixed in versions 27.2 of iOS, iPadOS, macOS Golden Gate, and visionOS. The vulnerability could allow a malicious app to access restricted system interfaces or manipulate launch attribution.
CVE-2026-86946 is a use-after-free vulnerability in macOS that could allow an application to cause unexpected system termination or corrupt kernel memory. The issue has been addressed with improved memory management and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A buffer overflow vulnerability was addressed by improving size validation in various Apple operating systems. The flaw could be triggered by processing a maliciously crafted audio file, potentially leading to memory corruption. This issue is fixed in multiple OS versions including iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2.
A privacy issue in macOS was addressed through improved memory management. The vulnerability could allow an application to access sensitive user data. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A type confusion vulnerability in Safari and related Apple operating systems was addressed through improved checks. The flaw could allow processing of maliciously crafted web content to cause memory corruption. The issue is fixed in Safari 27.2, iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, macOS Golden Gate 27.2, and visionOS 27.2.
A vulnerability in macOS allows a malicious application to create files in protected directories. This issue has been addressed with improved checks and fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An out-of-bounds write vulnerability was fixed by improved input validation in multiple Apple operating systems. The flaw could allow an app to cause unexpected system termination or corrupt kernel memory. The issue is resolved in iOS 26.7.2 and 27.2, iPadOS 26.7.2 and 27.2, and macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2.
A vulnerability involving improper handling of symbolic links (symlinks) was addressed by Apple. The flaw could allow an app to modify protected parts of the file system. This issue is fixed in iOS 26.7.2 and later, iPadOS 26.7.2 and later, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
An out-of-bounds write vulnerability was fixed by improving bounds checking in several Apple operating systems. The flaw could cause unexpected app termination when processing a maliciously crafted image. The issue is resolved in iOS 26.7.2, iPadOS 26.7.2, iOS 27.2, iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.2.
CVE-2026-86929 is an out-of-bounds write vulnerability in macOS that was addressed by improved bounds checking. The flaw could allow arbitrary code execution when processing a maliciously crafted file. The issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
A null pointer dereference vulnerability was addressed by improved input validation in multiple Apple operating systems. This flaw could allow an app to cause unexpected system termination. The issue is fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7.2, tvOS 27, visionOS 27, and watchOS 27.
An out-of-bounds read vulnerability was addressed by improved bounds checking in several Apple operating systems including iOS, iPadOS, macOS, and visionOS. The flaw could allow an application to cause a denial-of-service condition. The issue is fixed in iOS 26.7.2 and later, iPadOS 26.7.2 and later, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
A file quarantine bypass vulnerability in macOS was addressed by adding additional checks. This flaw allowed an application to bypass Gatekeeper checks, potentially undermining macOS security mechanisms. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.
An authorization issue affecting multiple Apple operating systems was addressed through improved state management. The flaw could allow an app to access sensitive user data. This vulnerability is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, and visionOS 27.
CVE-2026-86896 is a permissions vulnerability in macOS that was addressed by adding additional restrictions. The flaw could allow a malicious application to gain root privileges. The issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2.