{"id":"CVE-2026-84547","kind":"vulnerability","aliases":["CVE-2026-84547"],"related":[],"title":"macOS: memory corruption in input handling lets nearby attacker corrupt process memory","description":"A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical proximity may be able to corrupt process memory.","summary":"Apple fixed a memory corruption flaw in macOS that was addressed with improved input validation. An attacker with physical proximity may be able to corrupt process memory.","severity":"low","cvss":3.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","macos"],"not_affected_if":["patched-macos"],"how_to_check":"- unknown","fix":"- Update macOS to `27` (Golden Gate), `15.8` (Sequoia), or `26.7` (Tahoe), the versions named in the advisory.","status":"open","published_at":"2026-10-20T01:17:22+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T04:45:41+00:00","updated_at":"2026-10-25T04:45:41+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:45:41Z","model":"claude-haiku-5-5","output":{"fix":"- Update macOS to `27` (Golden Gate), `15.8` (Sequoia), or `26.7` (Tahoe), the versions named in the advisory.","reach":"local","title":"macOS: memory corruption in input handling lets nearby attacker corrupt process memory","impact":"medium","summary":"Apple fixed a memory corruption flaw in macOS that was addressed with improved input validation. An attacker with physical proximity may be able to corrupt process memory.","category":"infrastructure","nicknames":[],"who_cares":["macos","apple-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker corrupts process memory after physical access to the machine.","analyst_note":"Check Apple's security notes for CVE-2026-84547 to confirm the affected component, whether user interaction is needed, and the exact fixed build numbers.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["patched-macos"],"who_is_affected":"Mac machines running macOS releases before the fixed versions are affected. The sources name no specific component, configuration or role that makes a machine more exposed, so the affected surface is the whole OS. Machines already on the fixed releases can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.00056,"input_tokens":3284,"output_tokens":464,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-84547':15A,18A '15.8':72C '26.7':75C '27':69C 'abl':46B,83C 'address':34B,56C 'appl':20B,24B 'apple-devic':19B 'attack':9A,40B,77C 'corrupt':3A,10A,28B,48B,53C,85C 'cve':13A,16A 'devic':21B 'fix':25B,64C 'flaw':29B 'gate':68C 'golden':67C 'handl':6A 'improv':36B,58C 'infrastructur':22B 'input':5A,37B,59C 'issu':54C,62C 'let':7A 'maco':1A,23B,31B,66C,70C,73C 'may':44B,81C 'memori':2A,12A,27B,50B,52C,87C 'nearbi':8A 'physic':42B,79C 'process':11A,49B,86C 'proxim':43B,80C 'sequoia':71C 'taho':74C 'valid':38B,60C","nicknames":[],"mitigations":[],"who_affected":"Mac machines running macOS releases before the fixed versions are affected. The sources name no specific component, configuration or role that makes a machine more exposed, so the affected surface is the whole OS. Machines already on the fixed releases can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T01:17:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84547","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84547","severity":null,"published_at":"2026-10-20T01:17:22+00:00","modified_at":"2026-10-20T15:17:31+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}