{"id":"CVE-2026-84631","kind":"vulnerability","aliases":["CVE-2026-84631"],"related":[],"title":"apple macos: This issue was addressed with additional entitlement checks","description":"About the security content of macOS Golden Gate 27 - Apple Support\n\n# About the security content of macOS Golden Gate 27\n\nThis document describes the security content of macOS Golden Gate 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Golden Gate 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### afpfs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86940: Dave G.\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Intents\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Apple Intelligence security prompts\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84601: Nick Cook, Sentry Flag\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to delete files for which it does not have privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-86877: Hyunwoo Kim (@v4bel)\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84595: tamdao\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with ","summary":"Apple's security notes for macOS Golden Gate 27, released September 14, 2026, list fixes for several flaws, mostly letting apps read protected data or cause crashes. The excerpt does not show an entry for CVE-2026-84631, so what an attacker gets from this CVE is unknown.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"macOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple macos","fixed":["27.0"],"affected":"< 27.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","infrastructure","macos","vendor-advisory"],"not_affected_if":[],"how_to_check":null,"fix":"- macOS Golden Gate 27 (released September 14, 2026) is the release the advisory covers, but the excerpt does not confirm it fixes CVE-2026-84631","status":"open","published_at":"2026-09-14T21:17:38+00:00","first_seen_at":"2026-11-10T00:16:54+00:00","triaged_at":"2026-11-10T00:20:11+00:00","updated_at":"2026-11-10T00:28:46+00:00","category":"infrastructure","confidence":0.2,"triage":{"at":"2026-11-10T00:20:11Z","model":"claude-haiku-5-5","output":{"fix":"- macOS Golden Gate 27 (released September 14, 2026) is the release the advisory covers, but the excerpt does not confirm it fixes CVE-2026-84631","reach":"unknown","title":"macOS Golden Gate 27: Apple patches many flaws, this CVE's effect unconfirmed","impact":"medium","summary":"Apple's security notes for macOS Golden Gate 27, released September 14, 2026, list fixes for several flaws, mostly letting apps read protected data or cause crashes. The excerpt does not show an entry for CVE-2026-84631, so what an attacker gets from this CVE is unknown.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["macos"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Unknown; the excerpt shows no entry for this CVE","analyst_note":"Confirm whether CVE-2026-84631 appears in the Golden Gate 27 page at https://support.apple.com/en-us/149035; the excerpt is truncated before the entries that would cover it.","how_to_check":"unknown","plain_action":"Update your Mac to macOS Golden Gate 27.","product_name":"macOS","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Mac owners running macOS versions before Golden Gate 27 are the ones the advisory addresses. The listed models include recent Apple silicon Macs and the Mac Pro. The excerpt does not show which models or configurations this specific CVE affects.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.002174,"input_tokens":9249,"output_tokens":2498,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112446':597C '-2026':12A,15A,62B,250C,331C,412C,511C,596C,676C '-43664':413C '-65404':512C '-84631':13A,16A,63B '-86882':251C '-86918':332C '-86940':677C '14':37B,171C '19':340C,683C '2020':185C,193C,208C,266C,274C,289C,353C,361C,376C,451C,459C,474C,537C,545C,560C,617C,625C,640C '2021':200C,281C,368C,466C,552C,632C '2022':213C,294C,381C,479C,565C,645C '2023':222C,303C,390C,488C,574C,654C '2026':38B,172C,179C,260C,341C,347C,445C,531C,605C,611C,684C '26':604C '27':34B,82C,93C,104C,168C 'abl':396C,495C,580C,660C 'acceler':173C,254C 'access':342C,398C,582C 'account':440C,526C 'add':338C,602C,681C 'addit':8A,592C 'address':6A,244C,325C,406C,505C,590C,669C 'advisori':25B 'afpf':606C 'air':181C,262C,349C,447C,533C,613C 'andr':417C 'andrd3v':418C 'apf':685C 'app':46B,314C,393C,577C,657C 'appknox':522C 'appl':1A,20B,26B,83C,106C,113C,139C,143C,161C,183C,191C,198C,206C,220C,264C,272C,279C,287C,301C,351C,359C,366C,374C,388C,449C,457C,464C,472C,486C,535C,543C,550C,558C,572C,615C,623C,630C,638C,652C 'apple':18A 'applic':492C 'arni':333C,513C 'asaf':432C 'attack':67B 'author':502C 'avail':132C,175C,256C,343C,441C,527C,607C,686C 'bound':240C,247C,321C,328C 'bypass':497C 'caus':51B 'check':10A,248C,329C,594C 'cj':426C 'code':674C 'cohen':433C 'confirm':119C 'content':77C,88C,99C 'craft':227C,308C 'crash':52B 'custom':111C 'cve':11A,14A,61B,71B,150C,249C,330C,411C,510C,595C,675C 'cve-id':149C 'daniel':430C 'data':49B,401C,409C,585C 'dave':678C 'david':428C 'describ':96C 'descript':235C,316C,402C,500C,586C,665C 'disclos':116C,662C 'discuss':117C 'document':95C,145C 'doesn':114C 'entitl':9A,593C 'entri':59B,337C,601C,680C 'excerpt':54B 'febrero':431C 'fix':40B 'flaw':43B 'framework':174C,255C 'g':679C 'gate':33B,81C,92C,103C,167C 'get':68B 'golden':32B,80C,91C,102C,166C 'gongyu':434C 'hardarson':334C,514C 'id':151C 'ilya':416C 'imac':196C,277C,364C,462C,548C,628C 'imag':228C,309C 'impact':223C,304C,391C,489C,575C,655C 'improv':246C,327C,408C,507C 'inform':156C 'infrastructur':21B 'investig':124C 'issu':4A,121C,242C,323C,404C,503C,588C,667C 'jian':437C 'keller':420C 'kernel':663C 'kumar':518C 'later':187C,195C,202C,210C,215C,268C,276C,283C,291C,296C,355C,363C,370C,378C,383C,453C,461C,468C,476C,481C,539C,547C,554C,562C,567C,619C,627C,634C,642C,647C 'lead':230C,311C 'lee':438C 'let':45B 'liangwei':600C 'list':39B,136C 'ma':435C 'mac':203C,211C,217C,284C,292C,298C,371C,379C,385C,469C,477C,483C,555C,563C,569C,635C,643C,649C 'macbook':177C,180C,188C,258C,261C,269C,345C,348C,356C,443C,446C,454C,529C,532C,540C,609C,612C,620C,688C 'maco':2A,22B,31B,79C,90C,101C,165C 'macos':17A,19A 'malici':226C,307C,424C,491C 'malon':253C 'manag':509C 'may':229C,310C,394C,493C,578C,658C 'memori':664C 'mezone0':436C 'mini':204C,285C,372C,470C,556C,636C 'most':44B 'neo':178C,259C,346C,444C,530C,610C,689C 'neonix':335C,515C 'note':29B 'occur':126C 'octob':339C,603C,682C 'out-of-bound':237C,318C 'page':142C,164C 'patch':128C 'peter':252C 'possibl':153C 'prefer':499C 'privaci':498C 'pro':189C,218C,270C,299C,357C,386C,455C,484C,541C,570C,621C,650C 'process':224C,233C,305C 'product':162C 'protect':48B,112C,410C 'rasala':519C 'read':47B 'recent':133C 'refer':146C 'releas':35B,130C,134C,141C,169C 'remov':671C 'rosyna':419C 'secur':28B,76C,87C,98C,107C,120C,140C,144C,158C,163C,336C,516C 'see':159C 'sensit':399C,583C 'septemb':36B,170C 'sever':42B 'show':57B 'silicon':184C,192C,199C,207C,221C,265C,273C,280C,288C,302C,352C,360C,367C,375C,389C,450C,458C,465C,473C,487C,536C,544C,551C,559C,573C,616C,624C,631C,639C,653C 'sindr':598C 'softwar':425C 'sorhus':599C 'speedyfriend433':439C 'state':508C 'strnadel':429C 'stuart':414C,523C 'studio':212C,293C,380C,478C,564C,644C 'support':84C 'termin':234C,315C 'total':422C 'unexpect':232C,313C 'unknown':73B 'updat':108C 'user':400C,584C 'vana':427C 'vendor':24B 'vendor-advisori':23B 'vinay':517C 'vulner':147C,673C 'wallac':415C,524C 'write':241C,322C 'xplo8e':520C '이재영':525C","nicknames":[],"mitigations":[],"who_affected":"Mac owners running macOS versions before Golden Gate 27 are the ones the advisory addresses. The listed models include recent Apple silicon Macs and the Mac Pro. The excerpt does not show which models or configurations this specific CVE affects.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":"Update your Mac to macOS Golden Gate 27.","pkeys":["applemacos","macos"],"ptokens":["apple","macos"],"labels":["apple","high","infrastructure","macos","vendor","vendoradvisory"],"campaign_type":null,"search_a":"'-2026':12A,15A '-84631':13A,16A 'addit':8A 'address':6A 'appl':1A 'apple':18A 'check':10A 'cve':11A,14A 'entitl':9A 'issu':4A 'maco':2A 'macos':17A,19A","search_b":"'-2026':62B '-84631':63B '14':37B '2026':38B '27':34B 'advisori':25B 'app':46B 'appl':20B,26B 'attack':67B 'caus':51B 'crash':52B 'cve':61B,71B 'data':49B 'entri':59B 'excerpt':54B 'fix':40B 'flaw':43B 'gate':33B 'get':68B 'golden':32B 'infrastructur':21B 'let':45B 'list':39B 'maco':22B,31B 'most':44B 'note':29B 'protect':48B 'read':47B 'releas':35B 'secur':28B 'septemb':36B 'sever':42B 'show':57B 'unknown':73B 'vendor':24B 'vendor-advisori':23B","search_c":"'-112446':597C '-2026':250C,331C,412C,511C,596C,676C '-43664':413C '-65404':512C '-86882':251C '-86918':332C '-86940':677C '14':171C '19':340C,683C '2020':185C,193C,208C,266C,274C,289C,353C,361C,376C,451C,459C,474C,537C,545C,560C,617C,625C,640C '2021':200C,281C,368C,466C,552C,632C '2022':213C,294C,381C,479C,565C,645C '2023':222C,303C,390C,488C,574C,654C '2026':172C,179C,260C,341C,347C,445C,531C,605C,611C,684C '26':604C '27':82C,93C,104C,168C 'abl':396C,495C,580C,660C 'acceler':173C,254C 'access':342C,398C,582C 'account':440C,526C 'add':338C,602C,681C 'addit':592C 'address':244C,325C,406C,505C,590C,669C 'afpf':606C 'air':181C,262C,349C,447C,533C,613C 'andr':417C 'andrd3v':418C 'apf':685C 'app':314C,393C,577C,657C 'appknox':522C 'appl':83C,106C,113C,139C,143C,161C,183C,191C,198C,206C,220C,264C,272C,279C,287C,301C,351C,359C,366C,374C,388C,449C,457C,464C,472C,486C,535C,543C,550C,558C,572C,615C,623C,630C,638C,652C 'applic':492C 'arni':333C,513C 'asaf':432C 'author':502C 'avail':132C,175C,256C,343C,441C,527C,607C,686C 'bound':240C,247C,321C,328C 'bypass':497C 'check':248C,329C,594C 'cj':426C 'code':674C 'cohen':433C 'confirm':119C 'content':77C,88C,99C 'craft':227C,308C 'custom':111C 'cve':150C,249C,330C,411C,510C,595C,675C 'cve-id':149C 'daniel':430C 'data':401C,409C,585C 'dave':678C 'david':428C 'describ':96C 'descript':235C,316C,402C,500C,586C,665C 'disclos':116C,662C 'discuss':117C 'document':95C,145C 'doesn':114C 'entitl':593C 'entri':337C,601C,680C 'febrero':431C 'framework':174C,255C 'g':679C 'gate':81C,92C,103C,167C 'golden':80C,91C,102C,166C 'gongyu':434C 'hardarson':334C,514C 'id':151C 'ilya':416C 'imac':196C,277C,364C,462C,548C,628C 'imag':228C,309C 'impact':223C,304C,391C,489C,575C,655C 'improv':246C,327C,408C,507C 'inform':156C 'investig':124C 'issu':121C,242C,323C,404C,503C,588C,667C 'jian':437C 'keller':420C 'kernel':663C 'kumar':518C 'later':187C,195C,202C,210C,215C,268C,276C,283C,291C,296C,355C,363C,370C,378C,383C,453C,461C,468C,476C,481C,539C,547C,554C,562C,567C,619C,627C,634C,642C,647C 'lead':230C,311C 'lee':438C 'liangwei':600C 'list':136C 'ma':435C 'mac':203C,211C,217C,284C,292C,298C,371C,379C,385C,469C,477C,483C,555C,563C,569C,635C,643C,649C 'macbook':177C,180C,188C,258C,261C,269C,345C,348C,356C,443C,446C,454C,529C,532C,540C,609C,612C,620C,688C 'maco':79C,90C,101C,165C 'malici':226C,307C,424C,491C 'malon':253C 'manag':509C 'may':229C,310C,394C,493C,578C,658C 'memori':664C 'mezone0':436C 'mini':204C,285C,372C,470C,556C,636C 'neo':178C,259C,346C,444C,530C,610C,689C 'neonix':335C,515C 'occur':126C 'octob':339C,603C,682C 'out-of-bound':237C,318C 'page':142C,164C 'patch':128C 'peter':252C 'possibl':153C 'prefer':499C 'privaci':498C 'pro':189C,218C,270C,299C,357C,386C,455C,484C,541C,570C,621C,650C 'process':224C,233C,305C 'product':162C 'protect':112C,410C 'rasala':519C 'recent':133C 'refer':146C 'releas':130C,134C,141C,169C 'remov':671C 'rosyna':419C 'secur':76C,87C,98C,107C,120C,140C,144C,158C,163C,336C,516C 'see':159C 'sensit':399C,583C 'septemb':170C 'silicon':184C,192C,199C,207C,221C,265C,273C,280C,288C,302C,352C,360C,367C,375C,389C,450C,458C,465C,473C,487C,536C,544C,551C,559C,573C,616C,624C,631C,639C,653C 'sindr':598C 'softwar':425C 'sorhus':599C 'speedyfriend433':439C 'state':508C 'strnadel':429C 'stuart':414C,523C 'studio':212C,293C,380C,478C,564C,644C 'support':84C 'termin':234C,315C 'total':422C 'unexpect':232C,313C 'updat':108C 'user':400C,584C 'vana':427C 'vinay':517C 'vulner':147C,673C 'wallac':415C,524C 'write':241C,322C 'xplo8e':520C '이재영':525C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-09-14T21:17:38+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/149035#CVE-2026-84631","url":"https://support.apple.com/en-us/149035","severity":null,"published_at":"2026-10-26T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-11-10T00:16:54+00:00","fetched_at":"2026-11-10T00:16:54+00:00","note":"Apple: About the security content of macOS Golden Gate 27 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-84631","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84631","severity":null,"published_at":"2026-09-14T21:17:38+00:00","modified_at":"2026-09-15T17:35:16+00:00","first_seen_at":"2026-11-10T00:28:46+00:00","fetched_at":"2026-11-10T00:28:46+00:00","note":null}],"documents":[{"id":27515,"url":"https://support.apple.com/en-us/149035","title":"Apple: About the security content of macOS Golden Gate 27 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Golden Gate 27 - Apple Support\n\n# About the security content of macOS Golden Gate 27\n\nThis document describes the security content of macOS Golden Gate 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Golden Gate 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### afpfs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86940: Dave G.\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Intents\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Apple Intelligence security prompts\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84601: Nick Cook, Sentry Flag\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to delete files for which it does not have privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-86877: Hyunwoo Kim (@v4bel)\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84595: tamdao\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleFDEKeyStore\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84520: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### AppleMobileFileIntegrity\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-84584: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84522: Mickey Jin (@patch1t)\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Ahmed Alwardani, Mohamad Dawoud / Abodi Dawoud\n\n### Authentication Services\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to delete credentials stored in Keychain\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86905: Ilya Andr (andrd3v)\n\n### AuthKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### Automator\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84535: Kun Peeks (@SwayZGl1tZyyy), Oren Yomtov, Morris Richman (@morrisinlife), Sindre Sorhus\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logic issue was addressed with improved validation.\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84560: an anonymous researcher\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-84631: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### BOM\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nEntry added October 26, 2026\n\n### Carbon Core\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nCVE-2026-84528: zenith\n\nEntry added October 26, 2026\n\n### cd9660\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, Ataberk Yavuzer, 정우 하 (@0xfa11babe), Kun Peeks (@SwayZGl1tZyyy), Surej Sekhar, Suresh Sundaram, Hari Shanmugam (The Hxr1)\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-86966: Jihwan Yoon\n\nEntry added October 26, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\nEntry added October 26, 2026\n\n### CoreDrag\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed by removing the vulnerable code.\n\nCVE-2026-64752: Nik Tsytsarkin\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreML\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreServicesUIAgent\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted disk image may bypass Gatekeeper checks\n\nCVE-2026-65368: an anonymous researcher\n\nEntry added October 26, 2026\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing web content may lead to a denial-of-service\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84596: ret2happy, Meta Product Security\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84571: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\nCVE-2026-34979: Tristan Madani (@TristanInSec) from Talence Security, Юлия Мерцалова\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: An injection issue was addressed with improved validation.\n\nCVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain elevated privileges\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: An integer overflow was addres","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":27515,"url":"https://support.apple.com/en-us/149035","title":"Apple: About the security content of macOS Golden Gate 27 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Golden Gate 27 - Apple Support\n\n# About the security content of macOS Golden Gate 27\n\nThis document describes the security content of macOS Golden Gate 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Golden Gate 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### afpfs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86940: Dave G.\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Intents\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Apple Intelligence security prompts\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84601: Nick Cook, Sentry Flag\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to delete files for which it does not have privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-86877: Hyunwoo Kim (@v4bel)\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84595: tamdao\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleFDEKeyStore\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84520: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### AppleMobileFileIntegrity\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-84584: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84522: Mickey Jin (@patch1t)\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Ahmed Alwardani, Mohamad Dawoud / Abodi Dawoud\n\n### Authentication Services\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to delete credentials stored in Keychain\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86905: Ilya Andr (andrd3v)\n\n### AuthKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### Automator\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84535: Kun Peeks (@SwayZGl1tZyyy), Oren Yomtov, Morris Richman (@morrisinlife), Sindre Sorhus\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logic issue was addressed with improved validation.\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84560: an anonymous researcher\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-84631: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### BOM\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nEntry added October 26, 2026\n\n### Carbon Core\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nCVE-2026-84528: zenith\n\nEntry added October 26, 2026\n\n### cd9660\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, Ataberk Yavuzer, 정우 하 (@0xfa11babe), Kun Peeks (@SwayZGl1tZyyy), Surej Sekhar, Suresh Sundaram, Hari Shanmugam (The Hxr1)\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-86966: Jihwan Yoon\n\nEntry added October 26, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\nEntry added October 26, 2026\n\n### CoreDrag\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed by removing the vulnerable code.\n\nCVE-2026-64752: Nik Tsytsarkin\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreML\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreServicesUIAgent\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted disk image may bypass Gatekeeper checks\n\nCVE-2026-65368: an anonymous researcher\n\nEntry added October 26, 2026\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing web content may lead to a denial-of-service\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84596: ret2happy, Meta Product Security\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84571: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\nCVE-2026-34979: Tristan Madani (@TristanInSec) from Talence Security, Юлия Мерцалова\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: An injection issue was addressed with improved validation.\n\nCVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain elevated privileges\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: An integer overflow was addres","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}