{"id":"CVE-2026-84634","kind":"vulnerability","aliases":["CVE-2026-84634"],"related":[],"title":"Apple iOS, macOS and visionOS: race condition lets an app crash system or write kernel memory","description":"A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to cause unexpected system termination or write kernel memory.","summary":"A race condition in Apple's operating systems, fixed with additional validation in iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27, lets a malicious app cause unexpected system termination. The same flaw can also let an app write kernel memory, which is a serious privilege escalation risk.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apple-devices","infrastructure","ios","ipados","macos","visionos"],"not_affected_if":[],"how_to_check":"- unknown","fix":"- Update to iOS 27, iPadOS 27, macOS Golden Gate 27 or visionOS 27 or later, as published by Apple.","status":"open","published_at":"2026-10-26T21:20:20+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","triaged_at":"2026-10-26T21:57:03+00:00","updated_at":"2026-10-26T21:57:03+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-26T21:57:03Z","model":"claude-haiku-5-5","output":{"fix":"- Update to iOS 27, iPadOS 27, macOS Golden Gate 27 or visionOS 27 or later, as published by Apple.","reach":"local","title":"Apple iOS, macOS and visionOS: race condition lets an app crash system or write kernel memory","impact":"high","summary":"A race condition in Apple's operating systems, fixed with additional validation in iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27, lets a malicious app cause unexpected system termination. The same flaw can also let an app write kernel memory, which is a serious privilege escalation risk.","category":"infrastructure","nicknames":[],"who_cares":["ios","ipados","macos","visionos","apple-devices"],"confidence":0.4,"needs_auth":"unknown","worst_case":"A local app can crash the system or write kernel memory.","analyst_note":"Check Apple's security release notes for CVE-2026-84634 to confirm affected versions, the component, and whether exploitation requires a malicious app installed locally.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Devices running Apple operating systems before the iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27 releases are affected. The sources do not say which versions are vulnerable or whether any specific configuration matters. Teams that manage Apple devices should update them, and the sources do not indicate any group that can skip the update.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000603,"input_tokens":3264,"output_tokens":554,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':18A,21A '-84634':19A,22A '27':45B,47B,51B,54B,95C,98C,102C,104C 'abl':109C 'addit':41B,87C 'address':85C 'also':67B 'app':10A,58B,70B,106C 'appl':1A,24B,35B 'apple-devic':23B 'caus':59B,111C 'condit':7A,33B,83C 'crash':11A 'cve':17A,20A 'devic':25B 'escal':79B 'fix':39B,92C 'flaw':65B 'gate':50B,101C 'golden':49B,100C 'infrastructur':26B 'io':2A,27B,44B,94C 'ipado':28B,46B,97C 'issu':90C 'kernel':15A,72B,117C 'let':8A,55B,68B 'maco':3A,29B,48B,99C 'malici':57B 'may':107C 'memori':16A,73B,118C 'oper':37B 'privileg':78B 'race':6A,32B,82C 'risk':80B 'serious':77B 'system':12A,38B,61B,113C 'termin':62B,114C 'unexpect':60B,112C 'valid':42B,88C 'visiono':5A,30B,53B,103C 'write':14A,71B,116C","nicknames":[],"mitigations":[],"who_affected":"Devices running Apple operating systems before the iOS 27, iPadOS 27, macOS Golden Gate 27 and visionOS 27 releases are affected. The sources do not say which versions are vulnerable or whether any specific configuration matters. Teams that manage Apple devices should update them, and the sources do not indicate any group that can skip the update.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T21:20:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-84634","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84634","severity":null,"published_at":"2026-10-26T21:20:20+00:00","modified_at":"2026-10-26T21:20:20+00:00","first_seen_at":"2026-10-26T21:55:21+00:00","fetched_at":"2026-10-26T21:55:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}