Threat database

A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data.

A logic issue in Apple macOS allows an app to bypass Gatekeeper checks. This vulnerability was addressed with improved state management and fixed in macOS Golden Gate 27. The issue has a medium severity rating with a CVSS score of 4.4.

CVE-2026-43686 is a use-after-free vulnerability in Apple iOS and iPadOS that can lead to kernel memory corruption when connecting to a malicious NFS server. The issue affects multiple Apple operating systems including iOS, iPadOS, and macOS versions prior to specified fixed releases. Apple has addressed this vulnerability with improved memory management in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27. The vulnerability has a high severity CVSS score of 8.8 and involves potential impacts to confidentiality, integrity, and availability of the affected systems.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted file may lead to unexpected app termination.

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data.

A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data.

A memory initialization issue in Apple iOS and iPadOS could allow an app to determine the kernel memory layout. This vulnerability affects versions prior to iOS and iPadOS 26.7 and 27, as well as macOS versions prior to 15.8. The issue has been addressed with improved memory handling in the specified fixed versions.

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Tahoe 26.6. A malicious app may be able to gain root privileges.

CVE-2026-84555 is an authorization vulnerability in Apple macOS that could allow an app to access sensitive user data. The issue was addressed by improving access control mechanisms. The vulnerability is fixed in macOS Golden Gate 27 and macOS Sequoia 15.8. It has a medium severity rating with a CVSS score of 5.5.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause a denial of service.

A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-84543 is a high-severity vulnerability in Apple macOS where connecting to a malicious SMB server can cause unexpected system termination or corrupt kernel memory. The issue stems from an out-of-bounds access due to insufficient bounds checking. Apple fixed this vulnerability in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Mounting a malicious disk image may cause unexpected system termination.

The issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox.