Live › vulnerability › CVE-2026-84528
Go to dashboardA logging component on macOS recorded data that should have been redacted, so an app could read sensitive user information. Apple fixed it in macOS Golden Gate 27, Sequoia 15.8.2 and Tahoe 26.7.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Macs running macOS versions earlier than the fixed releases can be affected, since the flaw is in the system logging path that apps can reach. The sources do not say which configurations are exposed beyond that, so unknown for narrower scope. Machines already on the fixed releases can skip it.
No product ranges from the sources yet.
sw_vers -productVersion and compare it with the fixed releases.15.8.2 (Sequoia), 26.7.2 (Tahoe), or Golden Gate 27 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A logging issue was addressed with improved data redaction. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to access sensitive user data.
This page as .md · .json · in your agent: get_signal("CVE-2026-84528")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.