Live › vulnerability › CVE-2026-84633
Go to dashboardA path traversal flaw in macOS allows an app to escape its sandbox. Apple fixed it in macOS Golden Gate 27, and the sources give no further technical detail.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 21:55 UTC. All times on this page are UTC.
Any Mac running a macOS release older than Golden Gate 27 may be affected, since the flaw is in the operating system's path validation. The sources do not say which earlier releases are vulnerable or whether an attacker needs a local app already running, so the exact exposure is unknown.
No product ranges from the sources yet.
sw_vers -productVersion on each Mac to see the installed macOS version.Golden Gate 27 or later through System Settings > General > Software Update.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox.
This page as .md · .json · in your agent: get_signal("CVE-2026-84633")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.