Threat database

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. Connecting to a malicious afpfs server may lead to kernel memory corruption.

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVE-2026-84572 is a high-severity vulnerability in Apple macOS where an out-of-bounds read flaw could allow an app to cause unexpected system termination or read kernel memory. The issue is addressed by improved bounds checking and fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.

A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access user-sensitive data.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted 3D file may lead to an out-of-bounds read.

CVE-2026-84533 is a cryptographic vulnerability in Apple iOS and iPadOS that could allow an attacker in a privileged network position to modify network traffic. The issue was addressed by improving integrity checks and is fixed in iOS 27 and iPadOS 27. The vulnerability has a medium severity rating with a CVSS score of 5.3.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read.

CVE-2026-84564 is a medium severity vulnerability in Apple iOS and iPadOS where processing a maliciously crafted image may lead to disclosure of process memory due to an uninitialized memory issue. The issue is fixed in iOS and iPadOS versions 26.7 and later, as well as in other Apple operating systems including macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.

CVE-2026-84636 is an authorization vulnerability in Apple iOS and iPadOS that could allow an app to access sensitive user data. The issue was addressed by improved state management and fixed in iOS 27 and iPadOS 27. The vulnerability has a medium severity rating with a CVSS score of 5.5.

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read.

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-65377 is a memory corruption vulnerability in Apple iOS and iPadOS that could allow an app to cause unexpected system termination. The issue was addressed by improved memory handling and is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, and related Apple operating systems. The vulnerability has a medium severity rating with a CVSS score of 5.5 and does not impact confidentiality or integrity but affects system availability.

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier.

CVE-2026-84509 is a vulnerability in Apple macOS where connecting to a malicious SMB server may cause unexpected system termination due to an out-of-bounds read. The issue has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7. The vulnerability has a medium severity rating with a CVSS score of 6.5.

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to cause unexpected system termination or write kernel memory.

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sonoma 14.8.8. An app may be able to access sensitive user data.

CVE-2026-84600 is a medium severity vulnerability in Apple iOS and iPadOS where a malicious shortcut could send messages without user confirmation due to an authorization issue. The issue was addressed with improved state management and fixed in iOS 27 and iPadOS 27.

CVE-2026-43674 is an authentication vulnerability in Apple iOS and iPadOS that allows an attacker with physical access to an unlocked device to view stored Wi-Fi passwords without requiring authentication. This issue was addressed with improved state management and fixed in iOS 27 and iPadOS 27.