Live › vulnerability › CVE-2026-84508
Go to dashboardApple's advisory says an app can reach protected user data because the caller's access was not validated properly. Fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7 and visionOS 27.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run Apple devices with user data protected by the OS, such as iPhones, iPads, Macs and Vision Pro headsets. The sources do not say which apps or data stores are reachable, so the exact exposure is unknown. Teams whose devices already run the fixed versions can skip it.
No product ranges from the sources yet.
27 or later.26.7 or later, and macOS Golden Gate to 27.27 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app may be able to access protected user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-84508")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.