Live › vulnerability › CVE-2026-84496
Go to dashboardA malicious disk image mounted on macOS can trigger an out-of-bounds write in the system. The result is an unexpected system termination or corruption of kernel memory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Any Mac that mounts disk images from untrusted sources, such as downloaded DMG files or images attached to email, may be exposed. Machines that only mount vendor-signed or internally produced images are less exposed. The sources do not say which macOS versions before the fixes are affected.
No product ranges from the sources yet.
sw_vers -productVersion; versions before 27.2 on Golden Gate or before 26.7.2 on Tahoe are in scope.27.2 (macOS Golden Gate) or 26.7.2 (macOS Tahoe) or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27.2, macOS Tahoe 26.7.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.
This page as .md · .json · in your agent: get_signal("CVE-2026-84496")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.