Live › vulnerability › CVE-2026-84610
Go to dashboardA maliciously crafted ZIP archive can bypass the file quarantine checks that Gatekeeper applies to downloaded files. An attacker who gets a user to open such an archive can run software that macOS would otherwise block or warn about.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Any Mac running an unpatched macOS release on the affected lines can be exposed, since the flaw is in how the system checks archives it receives. The sources do not say whether a specific download path or configuration is required, so unknown for finer scoping. Teams that manage Macs should prioritise machines that handle untrusted archives.
No product ranges from the sources yet.
sw_vers -productVersion and compare against the fixed versions: 27, 15.8.2, 26.7.227, 15.8.2 or 26.7.2, or later on the same release lineEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
This page as .md · .json · in your agent: get_signal("CVE-2026-84610")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.