Apple Macos vulnerabilities

CVE-2026-84560 Medium · 6.1 CWE-863 Sep 14, 2026

Incorrect Authorization in Apple Ipados

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may gain unauthorized access to Bluetooth.

CVE-2026-84559 Medium · 5.5 CWE-693 Sep 14, 2026

A permissions issue was addressed with improved validation. This issue is fixed in macOS…

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to access restricted files.

CVE-2026-84558 Medium · 5.5 CWE-415 Sep 14, 2026

Double Free in Apple Macos

A double free issue was addressed with improved memory management. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination.

CVE-2026-84556 Medium · 5.5 CWE-285 Sep 14, 2026

Improper Authorization in Apple Macos

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVE-2026-84555 Medium · 5.5 CWE-284 Sep 14, 2026

Improper Access Control in Apple Macos

An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8. An app may be able to access sensitive user data.

CVE-2026-84554 Medium · 5.9 CWE-190 Sep 14, 2026

Integer Overflow or Wraparound in Apple Macos

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to cause a denial-of-service.

CVE-2026-84553 High · 7.5 CWE-400 Sep 14, 2026

Uncontrolled Resource Consumption in Apple Macos

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.

CVE-2026-84552 Medium · 5.5 CWE-125 Sep 14, 2026

Out-of-bounds Read in Apple Ipados

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

CVE-2026-84551 Medium · 4.4 CWE-862 Sep 14, 2026

Missing Authorization in Apple Ipados

A logic issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27, watchOS 27. An app may be able to bypass network restrictions.

CVE-2026-84550 Medium · 4.7 CWE-362 Sep 14, 2026

Race Condition in Apple Macos

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination.

CVE-2026-84549 High · 7.5 CWE-125 Sep 14, 2026

Out-of-bounds Read in Apple Macos

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.

CVE-2026-84548 High · 7.1 CWE-190 Sep 14, 2026

Integer Overflow or Wraparound in Apple Macos

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read.

CVE-2026-84546 High · 8.4 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption.

CVE-2026-84544 High · 7.5 CWE-190 Sep 14, 2026

Integer Overflow or Wraparound in Apple Macos

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory.

CVE-2026-84543 High · 7.5 CWE-125 Sep 14, 2026

Out-of-bounds Read in Apple Macos

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory.

CVE-2026-84541 Medium · 5.5 CWE-22 Sep 14, 2026

Path Traversal in Apple Macos

An input validation issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An application may be able to access restricted files.

CVE-2026-84540 Medium · 5.5 CWE-863 Sep 14, 2026

Incorrect Authorization in Apple Macos

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data.

CVE-2026-84538 Medium · 6.5 CWE-20 Sep 14, 2026

Improper Input Validation in Apple Macos

A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause a denial-of-service.

CVE-2026-84537 Medium · 6.6 CWE-119 Sep 14, 2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Apple Macos

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination or corrupt kernel memory.

CVE-2026-84536 Medium · 6.5 CWE-190 Sep 14, 2026

Integer Overflow or Wraparound in Apple Macos

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination.

CVE-2026-84535 High · 8.2 CWE-284 Sep 14, 2026

Improper Access Control in Apple Macos

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox.

CVE-2026-84534 Medium · 5.5 CWE-22 Sep 14, 2026

Path Traversal in Apple Ipados

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files.

CVE-2026-84533 Medium · 5.3 CWE-353 Sep 14, 2026

A cryptographic issue was addressed with improved integrity checks. This issue is fixed…

A cryptographic issue was addressed with improved integrity checks. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, watchOS 27. An attacker in a privileged network position may be able to modify network traffic.

CVE-2026-84532 Medium · 5.4 CWE-125 Sep 14, 2026

Out-of-bounds Read in Apple Ipados

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Opening a maliciously crafted file may cause unexpected process termination or disclose process memory.

CVE-2026-84531 Medium · 6.2 CWE-787 Sep 14, 2026

Out-of-bounds Write in Apple Ipados

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. Processing maliciously crafted NTLM input may lead to unexpected app termination.