Threat database

CVE-2026-84558 is a medium severity vulnerability in Apple macOS involving a double free memory management issue. This flaw could allow an application with limited privileges to cause unexpected system termination, impacting system availability. The issue is fixed in macOS Golden Gate 27.

CVE-2026-84626 is an information disclosure vulnerability in Apple iOS and iPadOS that allowed an app to identify other installed apps on a user's device. The issue was addressed by improved state management and fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, and related Apple operating systems. The vulnerability has a low severity score and requires local privileges with user interaction not needed.

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination.

CVE-2026-86885 is a vulnerability in Apple iOS and iPadOS where an attacker within radio range could cause unexpected system termination due to an input validation issue. This flaw has been addressed with improved input validation and fixed in iOS 27 and iPadOS 27.

CVE-2026-65395 is a medium severity vulnerability in Apple iOS and iPadOS where processing a maliciously crafted image may cause memory corruption due to an out-of-bounds write. The issue was fixed by improved bounds checking in iOS 26.7, iPadOS 26.7, and related Apple operating system versions.

This issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An app may be able to access sensitive user data.

CVE-2026-84553 is a high-severity vulnerability in Apple macOS that allows a remote attacker to cause a denial-of-service (DoS) condition through resource exhaustion. The issue was addressed by Apple with improved input validation and is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

CVE-2026-65383 is a vulnerability in Apple macOS that allows an app to bypass Gatekeeper checks. This issue has been addressed with improved checks and is fixed in macOS Golden Gate 27. The vulnerability has a medium severity rating with a CVSS score of 4.4.

CVE-2026-65415 is a race condition vulnerability in Apple iOS and iPadOS that could allow a local user to cause unexpected system termination or read kernel memory. The issue has been addressed with additional validation and fixed in iOS 27 and iPadOS 27. The vulnerability has a high severity rating with a CVSS score of 8.1.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

CVE-2026-43788 is an integer overflow vulnerability in Apple macOS that was addressed with improved input validation in macOS Golden Gate 27. Processing a maliciously crafted file could lead to denial-of-service or potentially disclose memory contents. The vulnerability affects macOS versions prior to 27. The CVSS score is 6.6, indicating a medium severity level.

A vulnerability in Apple macOS prior to version 27 allows an app with limited privileges to access sensitive user data due to insufficient sandbox restrictions on system pasteboards. This issue has been addressed by adding additional sandbox restrictions in macOS Golden Gate 27. The vulnerability has a medium severity rating with a CVSS score of 5.5.

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, watchOS 27. A malicious application may be able to leak sensitive user information.

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27. An app may be able to access sensitive user data.

A permissions issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Apple Intelligence security prompts.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to disclose kernel memory.