{"id":"CVE-2026-84599","kind":"vulnerability","aliases":["CVE-2026-84599"],"related":[],"title":"Apple OS: memory handling flaw lets an app crash the system or corrupt kernel memory","description":"The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory.","summary":"A memory handling flaw in Apple's operating systems lets a malicious app cause unexpected system termination or corrupt kernel memory. The sources do not say whether the attack can go further than that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple","infrastructure","ios","ipados","macos","tvos","visionos","watchos"],"not_affected_if":["already-patched"],"how_to_check":"- Check the device OS version under Settings > General > About (iOS, iPadOS, watchOS, tvOS, visionOS) or run `sw_vers` on macOS.\n- Compare the installed build with the fixed versions listed in the advisory.","fix":"- Update iOS and iPadOS to `26.7.2` or later, or to iOS 27 and iPadOS 27.\n- Update macOS Tahoe to `26.7`, macOS Sequoia to `15.8`, or install macOS Golden Gate 27.\n- Update tvOS 27, visionOS 27 and watchOS 27 to their fixed releases.","status":"open","published_at":"2026-10-26T21:20:14+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","triaged_at":"2026-10-26T21:57:10+00:00","updated_at":"2026-10-26T21:57:10+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T21:57:10Z","model":"claude-haiku-5-5","output":{"fix":"- Update iOS and iPadOS to `26.7.2` or later, or to iOS 27 and iPadOS 27.\n- Update macOS Tahoe to `26.7`, macOS Sequoia to `15.8`, or install macOS Golden Gate 27.\n- Update tvOS 27, visionOS 27 and watchOS 27 to their fixed releases.","reach":"local","title":"Apple OS: memory handling flaw lets an app crash the system or corrupt kernel memory","impact":"high","summary":"A memory handling flaw in Apple's operating systems lets a malicious app cause unexpected system termination or corrupt kernel memory. The sources do not say whether the attack can go further than that.","category":"infrastructure","nicknames":[],"who_cares":["apple","ios","ipados","macos","tvos","visionos","watchos"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Malicious app crashes the system or corrupts kernel memory","analyst_note":"Check Apple's security release notes for CVE-2026-84599 to confirm the attack path, whether code execution is possible, and whether it is exploited.","how_to_check":"- Check the device OS version under Settings > General > About (iOS, iPadOS, watchOS, tvOS, visionOS) or run `sw_vers` on macOS.\n- Compare the installed build with the fixed versions listed in the advisory.","needs_analyst":true,"not_affected_if":["already-patched"],"who_is_affected":"Anyone running an affected Apple OS version is exposed, since the flaw is in the operating system and not in a configurable feature. The sources do not say which apps or device configurations trigger it. Devices already on the fixed versions can skip this.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00065,"input_tokens":3332,"output_tokens":633,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-84599':18A,21A '15.8':90C '26.7':93C '26.7.2':75C,78C '27':80C,83C,87C,95C,97C,99C 'abl':104C 'address':64C 'app':8A,42B,101C 'appl':1A,22B,35B 'attack':58B 'caus':43B,106C 'corrupt':13A,48B,111C 'crash':9A 'cve':16A,19A 'fix':72C 'flaw':5A,33B 'gate':86C 'go':60B 'golden':85C 'handl':4A,32B,68C 'improv':66C 'infrastructur':23B 'io':24B,74C,79C 'ipado':25B,77C,82C 'issu':62C,70C 'kernel':14A,49B,112C 'let':6A,39B 'maco':26B,84C,88C,91C 'malici':41B 'may':102C 'memori':3A,15A,31B,50B,67C,113C 'oper':37B 'os':2A 'say':55B 'sequoia':89C 'sourc':52B 'system':11A,38B,45B,108C 'taho':92C 'termin':46B,109C 'tvos':27B,94C 'unexpect':44B,107C 'visiono':28B,96C 'watcho':29B,98C 'whether':56B","nicknames":[],"mitigations":[],"who_affected":"Anyone running an affected Apple OS version is exposed, since the flaw is in the operating system and not in a configurable feature. The sources do not say which apps or device configurations trigger it. Devices already on the fixed versions can skip this.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:20:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84599","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84599","severity":null,"published_at":"2026-10-26T21:20:14+00:00","modified_at":"2026-10-26T21:20:14+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","fetched_at":"2026-10-26T21:55:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}