{"id":"CVE-2026-86891","kind":"vulnerability","aliases":["CVE-2026-86891"],"related":[],"title":"An authorization issue was addressed with improved state management","description":"About the security content of macOS Golden Gate 27 - Apple Support\n\n# About the security content of macOS Golden Gate 27\n\nThis document describes the security content of macOS Golden Gate 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Golden Gate 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### afpfs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86940: Dave G.\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Intents\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Apple Intelligence security prompts\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84601: Nick Cook, Sentry Flag\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to delete files for which it does not have privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-86877: Hyunwoo Kim (@v4bel)\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84595: tamdao\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with ","summary":"This is Apple's security content page for macOS Golden Gate 27, released September 14, 2026, listing fixes for many flaws such as CVE-2026-86882 and CVE-2026-86918. The text provided does not describe what CVE-2026-86891 is, what it affects, or what an attacker gets from it.","severity":"low","cvss":3.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"macOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple macos","fixed":["15.8"],"affected":">= 15.0, < 15.8","ecosystem":"vendor"},{"name":"apple macos","fixed":["26.7"],"affected":">= 26.0, < 26.7","ecosystem":"vendor"},{"name":"apple watchos","fixed":["27.0"],"affected":"< 27.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","infrastructure","mac","macos","vendor-advisory"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-09-14T21:17:40+00:00","first_seen_at":"2026-11-10T00:16:54+00:00","triaged_at":"2026-11-10T00:20:10+00:00","updated_at":"2026-11-10T00:28:46+00:00","category":"infrastructure","confidence":0.2,"triage":{"at":"2026-11-10T00:20:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"macOS Golden Gate 27 security update: this CVE's flaw is not described","impact":"medium","summary":"This is Apple's security content page for macOS Golden Gate 27, released September 14, 2026, listing fixes for many flaws such as CVE-2026-86882 and CVE-2026-86918. The text provided does not describe what CVE-2026-86891 is, what it affects, or what an attacker gets from it.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["macos","apple","mac"],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Unknown: this CVE's entry is not in the provided text","analyst_note":"Find the entry for CVE-2026-86891 in the four Apple advisories (https://support.apple.com/en-us/149035, 149042, 149043, 149037) and confirm the component, impact, affected devices and fixed macOS version.","how_to_check":"unknown","plain_action":"","product_name":"macOS","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.001743,"input_tokens":9405,"output_tokens":1605,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-112446':602C '-2026':11A,14A,54B,58B,68B,255C,336C,417C,516C,601C,681C '-43664':418C '-65404':517C '-86882':55B,256C '-86891':12A,15A,69B '-86918':59B,337C '-86940':682C '14':44B,176C '19':345C,688C '2020':190C,198C,213C,271C,279C,294C,358C,366C,381C,456C,464C,479C,542C,550C,565C,622C,630C,645C '2021':205C,286C,373C,471C,557C,637C '2022':218C,299C,386C,484C,570C,650C '2023':227C,308C,395C,493C,579C,659C '2026':45B,177C,184C,265C,346C,352C,450C,536C,610C,616C,689C '26':609C '27':41B,87C,98C,109C,173C 'abl':401C,500C,585C,665C 'acceler':178C,259C 'access':347C,403C,587C 'account':445C,531C 'add':343C,607C,686C 'addit':597C 'address':5A,249C,330C,411C,510C,595C,674C 'advisori':29B 'affect':73B 'afpf':611C 'air':186C,267C,354C,452C,538C,618C 'andr':422C 'andrd3v':423C 'apf':690C 'app':319C,398C,582C,662C 'appknox':527C 'appl':23B,32B,88C,111C,118C,144C,148C,166C,188C,196C,203C,211C,225C,269C,277C,284C,292C,306C,356C,364C,371C,379C,393C,454C,462C,469C,477C,491C,540C,548C,555C,563C,577C,620C,628C,635C,643C,657C 'apple':17A,19A,21A 'applic':497C 'arni':338C,518C 'asaf':437C 'attack':77B 'author':2A,507C 'avail':137C,180C,261C,348C,446C,532C,612C,691C 'bound':245C,252C,326C,333C 'bypass':502C 'check':253C,334C,599C 'cj':431C 'code':679C 'cohen':438C 'confirm':124C 'content':35B,82C,93C,104C 'craft':232C,313C 'custom':116C 'cve':10A,13A,53B,57B,67B,155C,254C,335C,416C,515C,600C,680C 'cve-id':154C 'daniel':435C 'data':406C,414C,590C 'dave':683C 'david':433C 'describ':65B,101C 'descript':240C,321C,407C,505C,591C,670C 'disclos':121C,667C 'discuss':122C 'document':100C,150C 'doesn':119C 'entitl':598C 'entri':342C,606C,685C 'febrero':436C 'fix':47B 'flaw':50B 'framework':179C,260C 'g':684C 'gate':40B,86C,97C,108C,172C 'get':78B 'golden':39B,85C,96C,107C,171C 'gongyu':439C 'hardarson':339C,519C 'id':156C 'ilya':421C 'imac':201C,282C,369C,467C,553C,633C 'imag':233C,314C 'impact':228C,309C,396C,494C,580C,660C 'improv':7A,251C,332C,413C,512C 'inform':161C 'infrastructur':24B 'investig':129C 'issu':3A,126C,247C,328C,409C,508C,593C,672C 'jian':442C 'keller':425C 'kernel':668C 'kumar':523C 'later':192C,200C,207C,215C,220C,273C,281C,288C,296C,301C,360C,368C,375C,383C,388C,458C,466C,473C,481C,486C,544C,552C,559C,567C,572C,624C,632C,639C,647C,652C 'lead':235C,316C 'lee':443C 'liangwei':605C 'list':46B,141C 'ma':440C 'mac':25B,208C,216C,222C,289C,297C,303C,376C,384C,390C,474C,482C,488C,560C,568C,574C,640C,648C,654C 'macbook':182C,185C,193C,263C,266C,274C,350C,353C,361C,448C,451C,459C,534C,537C,545C,614C,617C,625C,693C 'maco':26B,38B,84C,95C,106C,170C 'macos':16A,18A,20A 'malici':231C,312C,429C,496C 'malon':258C 'manag':9A,514C 'mani':49B 'may':234C,315C,399C,498C,583C,663C 'memori':669C 'mezone0':441C 'mini':209C,290C,377C,475C,561C,641C 'neo':183C,264C,351C,449C,535C,615C,694C 'neonix':340C,520C 'occur':131C 'octob':344C,608C,687C 'out-of-bound':242C,323C 'page':36B,147C,169C 'patch':133C 'peter':257C 'possibl':158C 'prefer':504C 'privaci':503C 'pro':194C,223C,275C,304C,362C,391C,460C,489C,546C,575C,626C,655C 'process':229C,238C,310C 'product':167C 'protect':117C,415C 'provid':62B 'rasala':524C 'recent':138C 'refer':151C 'releas':42B,135C,139C,146C,174C 'remov':676C 'rosyna':424C 'secur':34B,81C,92C,103C,112C,125C,145C,149C,163C,168C,341C,521C 'see':164C 'sensit':404C,588C 'septemb':43B,175C 'silicon':189C,197C,204C,212C,226C,270C,278C,285C,293C,307C,357C,365C,372C,380C,394C,455C,463C,470C,478C,492C,541C,549C,556C,564C,578C,621C,629C,636C,644C,658C 'sindr':603C 'softwar':430C 'sorhus':604C 'speedyfriend433':444C 'state':8A,513C 'strnadel':434C 'stuart':419C,528C 'studio':217C,298C,385C,483C,569C,649C 'support':89C 'termin':239C,320C 'text':61B 'total':427C 'unexpect':237C,318C 'updat':113C 'user':405C,589C 'vana':432C 'vendor':28B 'vendor-advisori':27B 'vinay':522C 'vulner':152C,678C 'wallac':420C,529C 'watchos':22A 'write':246C,327C 'xplo8e':525C '이재영':530C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":null,"pkeys":["applemacos","applewatchos","macos","watchos"],"ptokens":["apple","macos","watchos"],"labels":["apple","infrastructure","low","mac","macos","vendor","vendoradvisory"],"campaign_type":null,"search_a":"'-2026':11A,14A '-86891':12A,15A 'address':5A 'apple':17A,19A,21A 'author':2A 'cve':10A,13A 'improv':7A 'issu':3A 'macos':16A,18A,20A 'manag':9A 'state':8A 'watchos':22A","search_b":"'-2026':54B,58B,68B '-86882':55B '-86891':69B '-86918':59B '14':44B '2026':45B '27':41B 'advisori':29B 'affect':73B 'appl':23B,32B 'attack':77B 'content':35B 'cve':53B,57B,67B 'describ':65B 'fix':47B 'flaw':50B 'gate':40B 'get':78B 'golden':39B 'infrastructur':24B 'list':46B 'mac':25B 'maco':26B,38B 'mani':49B 'page':36B 'provid':62B 'releas':42B 'secur':34B 'septemb':43B 'text':61B 'vendor':28B 'vendor-advisori':27B","search_c":"'-112446':602C '-2026':255C,336C,417C,516C,601C,681C '-43664':418C '-65404':517C '-86882':256C '-86918':337C '-86940':682C '14':176C '19':345C,688C '2020':190C,198C,213C,271C,279C,294C,358C,366C,381C,456C,464C,479C,542C,550C,565C,622C,630C,645C '2021':205C,286C,373C,471C,557C,637C '2022':218C,299C,386C,484C,570C,650C '2023':227C,308C,395C,493C,579C,659C '2026':177C,184C,265C,346C,352C,450C,536C,610C,616C,689C '26':609C '27':87C,98C,109C,173C 'abl':401C,500C,585C,665C 'acceler':178C,259C 'access':347C,403C,587C 'account':445C,531C 'add':343C,607C,686C 'addit':597C 'address':249C,330C,411C,510C,595C,674C 'afpf':611C 'air':186C,267C,354C,452C,538C,618C 'andr':422C 'andrd3v':423C 'apf':690C 'app':319C,398C,582C,662C 'appknox':527C 'appl':88C,111C,118C,144C,148C,166C,188C,196C,203C,211C,225C,269C,277C,284C,292C,306C,356C,364C,371C,379C,393C,454C,462C,469C,477C,491C,540C,548C,555C,563C,577C,620C,628C,635C,643C,657C 'applic':497C 'arni':338C,518C 'asaf':437C 'author':507C 'avail':137C,180C,261C,348C,446C,532C,612C,691C 'bound':245C,252C,326C,333C 'bypass':502C 'check':253C,334C,599C 'cj':431C 'code':679C 'cohen':438C 'confirm':124C 'content':82C,93C,104C 'craft':232C,313C 'custom':116C 'cve':155C,254C,335C,416C,515C,600C,680C 'cve-id':154C 'daniel':435C 'data':406C,414C,590C 'dave':683C 'david':433C 'describ':101C 'descript':240C,321C,407C,505C,591C,670C 'disclos':121C,667C 'discuss':122C 'document':100C,150C 'doesn':119C 'entitl':598C 'entri':342C,606C,685C 'febrero':436C 'framework':179C,260C 'g':684C 'gate':86C,97C,108C,172C 'golden':85C,96C,107C,171C 'gongyu':439C 'hardarson':339C,519C 'id':156C 'ilya':421C 'imac':201C,282C,369C,467C,553C,633C 'imag':233C,314C 'impact':228C,309C,396C,494C,580C,660C 'improv':251C,332C,413C,512C 'inform':161C 'investig':129C 'issu':126C,247C,328C,409C,508C,593C,672C 'jian':442C 'keller':425C 'kernel':668C 'kumar':523C 'later':192C,200C,207C,215C,220C,273C,281C,288C,296C,301C,360C,368C,375C,383C,388C,458C,466C,473C,481C,486C,544C,552C,559C,567C,572C,624C,632C,639C,647C,652C 'lead':235C,316C 'lee':443C 'liangwei':605C 'list':141C 'ma':440C 'mac':208C,216C,222C,289C,297C,303C,376C,384C,390C,474C,482C,488C,560C,568C,574C,640C,648C,654C 'macbook':182C,185C,193C,263C,266C,274C,350C,353C,361C,448C,451C,459C,534C,537C,545C,614C,617C,625C,693C 'maco':84C,95C,106C,170C 'malici':231C,312C,429C,496C 'malon':258C 'manag':514C 'may':234C,315C,399C,498C,583C,663C 'memori':669C 'mezone0':441C 'mini':209C,290C,377C,475C,561C,641C 'neo':183C,264C,351C,449C,535C,615C,694C 'neonix':340C,520C 'occur':131C 'octob':344C,608C,687C 'out-of-bound':242C,323C 'page':147C,169C 'patch':133C 'peter':257C 'possibl':158C 'prefer':504C 'privaci':503C 'pro':194C,223C,275C,304C,362C,391C,460C,489C,546C,575C,626C,655C 'process':229C,238C,310C 'product':167C 'protect':117C,415C 'rasala':524C 'recent':138C 'refer':151C 'releas':135C,139C,146C,174C 'remov':676C 'rosyna':424C 'secur':81C,92C,103C,112C,125C,145C,149C,163C,168C,341C,521C 'see':164C 'sensit':404C,588C 'septemb':175C 'silicon':189C,197C,204C,212C,226C,270C,278C,285C,293C,307C,357C,365C,372C,380C,394C,455C,463C,470C,478C,492C,541C,549C,556C,564C,578C,621C,629C,636C,644C,658C 'sindr':603C 'softwar':430C 'sorhus':604C 'speedyfriend433':444C 'state':513C 'strnadel':434C 'stuart':419C,528C 'studio':217C,298C,385C,483C,569C,649C 'support':89C 'termin':239C,320C 'total':427C 'unexpect':237C,318C 'updat':113C 'user':405C,589C 'vana':432C 'vinay':522C 'vulner':152C,678C 'wallac':420C,529C 'write':246C,327C 'xplo8e':525C '이재영':530C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-09-14T21:17:40+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"lab","external_id":"https://support.apple.com/en-us/149035#CVE-2026-86891","url":"https://support.apple.com/en-us/149035","severity":null,"published_at":"2026-10-26T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-11-10T00:16:54+00:00","fetched_at":"2026-11-10T00:16:54+00:00","note":"Apple: About the security content of macOS Golden Gate 27 - Apple Support"},{"source":"lab","external_id":"https://support.apple.com/en-us/149042#CVE-2026-86891","url":"https://support.apple.com/en-us/149042","severity":null,"published_at":"2026-10-26T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-11-10T00:16:55+00:00","fetched_at":"2026-11-10T00:16:55+00:00","note":"Apple: About the security content of macOS Tahoe 26.7 - Apple Support"},{"source":"lab","external_id":"https://support.apple.com/en-us/149043#CVE-2026-86891","url":"https://support.apple.com/en-us/149043","severity":null,"published_at":"2026-10-26T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-11-10T00:17:00+00:00","fetched_at":"2026-11-10T00:17:00+00:00","note":"Apple: About the security content of macOS Sequoia 15.8 - Apple Support"},{"source":"lab","external_id":"https://support.apple.com/en-us/149037#CVE-2026-86891","url":"https://support.apple.com/en-us/149037","severity":null,"published_at":"2026-10-26T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-11-10T00:17:03+00:00","fetched_at":"2026-11-10T00:17:03+00:00","note":"Apple: About the security content of watchOS 27 - Apple Support"},{"source":"nvd","external_id":"CVE-2026-86891","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86891","severity":null,"published_at":"2026-09-14T21:17:40+00:00","modified_at":"2026-09-18T14:25:18+00:00","first_seen_at":"2026-11-10T00:28:46+00:00","fetched_at":"2026-11-10T00:28:46+00:00","note":null}],"documents":[{"id":27518,"url":"https://support.apple.com/en-us/149042","title":"Apple: About the security content of macOS Tahoe 26.7 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Tahoe 26.7 - Apple Support\n\n# About the security content of macOS Tahoe 26.7\n\nThis document describes the security content of macOS Tahoe 26.7.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Tahoe 26.7\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: macOS Tahoe\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accessibility\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious Software, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma (@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\n### Accounts\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### AMD\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to elevate privileges\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-28853: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: macOS Tahoe\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: macOS Tahoe\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Lehan Dilusha Jayasingha (Sri Lanka), Jasminder Pal Singh, Dem0ns (@天府简易信工作室), Abdelhak Kherroubi\n\n### Apple Neural Engine\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65408: tamdao\n\n### AppleAVD\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleMobileFileIntegrity\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### ATS\n\nImpact: An app may be able to read files outside of its sandbox\n\nDescription: A permissions issue was addressed by removing the vulnerable code.\n\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\n### ATS\n\nImpact: An app may be able to access user-sensitive data\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Mohamad Dawoud / Abodi Dawoud, Ahmed Alwardani\n\n### AuthKit\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### autofs\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### Automator\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84535: Sindre Sorhus, Oren Yomtov, Morris Richman (@morrisinlife), Kun Peeks (@SwayZGl1tZyyy)\n\n### AVEVideoEncoder\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84613: jioundai\n\nEntry added October 19, 2026\n\n### cd9660\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, 정우 하 (@0xfa11babe), Suresh Sundaram, Surej Sekhar, Kun Peeks (@SwayZGl1tZyyy), Hari Shanmugam (The Hxr1), Ataberk Yavuzer\n\n### configd\n\nAvailable for: macOS Tahoe\n\nImpact: An app with admin privileges may be able to modify the System Keychain\n\nDescription: An authorization issue was addressed with improved entitlement checks.\n\nCVE-2026-86907: Roman Zabicki\n\nEntry added October 19, 2026\n\n### copyfile\n\nAvailable for: macOS Tahoe\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### Core Bluetooth\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### CoreDrag\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreMedia Video Toolbox\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\n### CoreML\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nImpact: An app may bypass Gatekeeper checks\n\nCVE-2026-28899: Kraken Cryptocurrency Exchange, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CoreServices\n\nImpact: A malicious application may be able to access restricted files\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreText\n\nImpact: Processing web content may lead to a denial-of-service\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreTypes\n\nImpact: A malicious app may be able to break out of its sandbox\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nCVE-2026-84511: stratan (@5tratan), Rahul Raj\n\n### CUPS\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nImpact: An app may be able to gain elevated privileges\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nCVE-2026-84554: Meshaal @ Darkcov, Joseph Shamoon\n\n### CUPS\n\nCVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, 章鱼哥@aipy （aipyaipy.com）, instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com\n\n### CUPS\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43691: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nImpact: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84516: 章鱼哥@aipy (aipyaipy.com）\n\n### CUPS\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nImpact: An application may be able to access restricted files\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-84541: 章鱼哥@aipy (aipyaipy.com)\n\n### DesktopServices\n\nAvailable for: macOS Tahoe\n\nImpact: Opening a file referencing a network share may lead to unexpected software execution\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84579: Thiago Mayllart\n\nEntry added October 19, 2026\n\n### DeviceCheck\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### Directory Utility\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to gain root privileges\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84505: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Hyunwoo Kim (@v4bel), flower xu, Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), Adriatik Raci\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: Processing a maliciously crafted disk image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84565: Nathaniel Oh (@calysteon)\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84550: Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-65362: Manish Bhatt, Amazon Leo Security, Nathaniel Oh (@calysteon), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Adriatik Raci\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84512: Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### exFAT\n\nImpact: Mounting a maliciously crafted volume may lead to unexpected system termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84510: Richard Zana, Meta Red Team X - Nik Tsytsarkin\n\n### File Bookmark\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to modify a file it only had permission to read\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43785: Junyeong Lee (jylab.github.io), Merrick Hare, Narendra Singh (@_3P1C), John Nzyuko Uvyu, Aditya Kumar\n\n### file_cmds\n\nAvailable for: macOS Tahoe\n\nImpact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-84534: Geoffrey Lovelace\n\n### FontParser\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84524: an anonymous researcher\n\n### Foundation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Game Center\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-84618: Luke Symons\n\n### Graphics\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang\n\n### GPU Drivers\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86981: f00l (@PPPF00L) and 3ndy1 (@_3ndy1)\n\nEntry added October 19, 2026\n\n### Heimdal\n\nImpact: A user in a privileged network position may be able to leak sensitive user information\n\nCVE-2022-3437: Roman Zabicki\n\n### Heimdal\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-86868: Redon Gashi of Sentry\n\nEntry added October 19, 2026\n\n### HFS\n\nImpact: Mounting a malicious disk image may cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28934: Arni Hardarson (Neonix Security), Tristan Madani (@TristanInSec) from Talence Security, 정우 하, Aswin Kumar Gokulakannan, Peter Malone, Dun\n\n### HFS\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84581: Jonathan Bar Or (@yo_yo_yo_jbo), Feng Xue and XGPT of ThreatBook, Alfredo Pesoli (@__rev) of Bynar.io\n\n### Image Capture\n\nCVE-2026-64756: Luke Symons\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nCVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nCVE-2026-64759: Musaab Khan (@bxff), XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine, Guannan Wang, Zhanpeng Liu, Jiashuo Liang, Guancheng Li, Iain Harkiss, Daniel Febrero\n\nEntry added October 26, 2026\n\n### IOAcceleratorFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86944: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### IOGPUFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-43743: Lyutoon, Dun\n\n### IOKit\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영\n\n### Kernel\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84566: Bernhard Jackiewicz\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: Svetoslav Stolarov, Josh Maine of Calif.io, genter0, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: macOS Tahoe\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84549: Surya Narayan Kushwaha, Aswin Kumar Gokulakannan\n\n### Kernel\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84619: James Duffy (@0x4A616D657344), genter0, Eddy Tsalolikhin\n\n### Kernel\n\nAvailable for: macOS Tahoe\n\nImpact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43790: Omar Cerrito\n\n### Kernel\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Ye Zhang (@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: A malicious application may bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-65369: an anonymous researcher\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84544: Surya Narayan Kushwaha, Abhijeet Singh (www.linkedin.com/in/abhiunix/)\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43687: R4mbb of KRsecurity, Peter Malone\n\n### Kernel\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-86917: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nCVE-2026-43686: Peter Malone\n\n### Kernel\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84538: Stuart Thomas\n\n### Kernel\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nCVE-2026-65364: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65401: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-84530: Vladislav Shevchenko (Positive Technologies)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84521: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84517: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01\n\nEntry added October 19, 2026\n\n### Kernel\n\nEntry added October 26, 2026\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-84599: an anonymous researcher\n\nEntry added October 26, 2026\n\n### Kext Management\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-84514: Mohamed Wedatalla, Nathaniel Oh (@calysteon), Arjanit Isufi\n\n### Keychain Access\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-84556: Peter Malone, HvxyZLF, Chris Bailey - Short Circuit, Adrián Díaz Aguilar\n\n### LaunchServices\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-65382: an anonymous researcher\n\n### libxpc\n\nImpact: An app may be able to bypass sandbox restrictions\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-84577: Dave G. and Alex Radocea of supernetworks.org\n\n### Mail\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-84573: Dawuge of Shuffle Team\n\n### Mail\n\nAvailable for: macOS Tahoe\n\nImpact: An attacker in a privileged network position may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-43787: Armend Gashi\n\n### mDNSResponder\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive network connection information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-86914: Richard Zana\n\nEntry added October 19, 2026\n\n### Messages\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access protected user data\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-43741: Dawuge of Shuffle Team\n\n### Messages\n\nAvailable for: macOS Tahoe\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-86959: an anonymous researcher\n\nEntry added October 19, 2026\n\n### MobileAccessoryUpdater\n\nImpact: Connecting a malicious accessory may cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-86924: Matthew Zamat\n\n### Model I/O\n\nImpact: Opening a maliciously crafted file may lead to unexpected process termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84497: Yiğit Can YILMAZ (@yilmazcanyigit)\n\n### Multi-Touch\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65372: 이재영\n\nEntry added October 19, 2026\n\n### NetworkExtension\n\nImpact: An app may be able to identify what other apps a user has installed\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84626: Hoffcona of IES Red Team\n\nEntry updated October 19, 2026\n\n### NetworkExtension\n\nCVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\n### odproxyd\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-64712: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### quarantine\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84580: an anonymous researcher\n\n### quarantine\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84578: Kenneth Chew\n\n### QuartzCore\n\nCVE-2026-84576: Dora Orak, @Ethan Arbuckle, and @leptos_null\n\n### Quick Look\n\nImpact: Processing a maliciously crafted document may lead to an out-of-bounds read\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84548: Peter Malone\n\n### RealityKit\n\nImpact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n\nCVE-2026-84532: Franco Belman at Blackwing Intelligence, Hongsik Kim (mnur), stratan (@5tratan)\n\nEntry updated October 26, 2026\n\n### RealityKit\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-28966: stratan (@5tratan)\n\n### Reminders\n\nCVE-2026-65403: Rahul Raj\n\n### Sandbox\n\nCVE-2026-65392: Prathamesh Walunj, Csaba Fitzl (@theevilbit) of Iru, Ahmad Al Harrizuan Izadin\n\nEntry added October 26, 2026\n\n### SceneKit\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84487: stratan (@5tratan), Peter Malone, Dhiyanesh Selvaraj (@redroot97)\n\n### SceneKit\n\nCVE-2026-65413: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\nCVE-2026-84611: Nathaniel Oh (@calysteon)\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84632: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84620: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43697: an anonymous researcher, Peter Malone\n\nEntry updated October 26, 2026\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nCVE-2026-84526: stratan (@5tratan)\n\n### Screen Sharing Server\n\nCVE-2026-43760: Alfredo Pesoli (@__rev) of Bynar.io, wdszzml and Atuin Automated Vulnerability Discovery Engine\n\n### Screen Sharing Server\n\nImpact: An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-65400: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)\n\n### Security\n\nImpact: An attacker in a privileged network position may be able to intercept network traffic\n\nCVE-2026-86889: Jaeho Nam, Jungbum Lee, Sangwi Kang, Hyeonguk Ko and Taekyoung Kwon from SNU CSE MMLAB (mmlab.snu.ac.kr)\n\n### Security\n\nAvailable for: macOS Tahoe\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\nCVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak\n\n### Security\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access protected user data\n\nDescription: This issue was addressed with improved validation of the caller's access.\n\nCVE-2026-84508: Abodi Dawoud, Roelof van Dijk, Merrick Hare\n\nEntry added October 19, 2026\n\n### Siri\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An access issue was addressed with improved access controls.\n\nCVE-2026-65356: Ricardo Prado\n\nEntry added October 19, 2026\n\n### SMB\n\nAvailable for: macOS Tahoe\n\nImpact: Mounting a maliciously crafted SMB network share may lead to system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43719: Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nCVE-2026-84543: Peter Malone\n\n### SMB\n\nImpact: A local user may be able to read kernel memory\n\nDescription: A race condition was addressed with improved locking.\n\nCVE-2026-43690: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65376: 재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nDescription: An integer underflow was addressed with improved input validation.\n\nCVE-2026-84536: 재영 정, Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84537: Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: Connecting to a malicious SMB share may disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65365: Jay Patel, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to kernel memory corruption\n\nCVE-2026-84515: 재영 정, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84509: Dave G.\n\n### SMB\n\nImpact: An attacker with control of a network file server may be able to cause unexpected system termination\n\nCVE-2026-86871: John Lussier, Cem Onat Karagun, Ashish Kunwar\n\nEntry added October 19, 2026\n\n### smbx\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84553: Stuart Thomas\n\n### Software Update\n\nImpact: An app may be able to modify protected system files\n\nCVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team\n\n### SoftwareUpdate\n\nCVE-2026-65361: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova\n\n### Spotlight\n\nCVE-2026-65378: 杉山 壮太, AL Najafi, Richard Zana, Abodi Dawoud, Sindre Sorhus, 糖豆爸爸(@晴天组织), Niels Hofmans, Robert Mindo\n\nEntry updated October 26, 2026\n\n### Spotlight\n\nCVE-2026-84621: Abodi Dawoud, Ujjwal Reddy Kalvolu Sreenivasa Reddy, Johan Wahyudi, Armend Gashi\n\n### Storage\n\nCVE-2026-65345: 이재영, Seung Je Seong, Jakob Pammer, Ilya Andr (andrd3v) of Positive Technologies\n\n### Storage\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-65348: Jérôme Djouder\n\n### StorageKit\n\nCVE-2026-43791: Amy (amys.website), Meridian Miftari, Aaron Grattafiori - NVIDIA AI Red Team\n\n### Symptom Framework\n\nImpact: A malicious application may be able to determine a user's current location\n\nCVE-2026-84513: Sindre Sorhus\n\n### TCC\n\nCVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84572: Tomi (tk0) Koski (@tomikoski), Hari Shanmugam (The Hxr1)\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-84506: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: Connecting to a malicious WebDAV server may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-43677: Joseph Semaan, bubu, Omar Cerrito, HE WEI (ギカク), Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: Connecting to a malicious WebDAV server may result in code execution\n\nDescription: A memory corruption issue was addressed with improved validation.\n\nCVE-2026-65374: He Wei（ギカク), Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Wi-Fi\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86957: Niels Hofmans, Drin Raci of sentry.security\n\nEntry added October 19, 2026\n\n### WindowServer\n\nImpact: An app may be able to access sensitive user data\n\nDescription: The issue was addressed with improved handling of secure input state.\n\nCVE-2026-65379: Ricardo Prado\n\n### XPC\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84617: Stuart Wallace\n\n## Additional recognition\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### configd\n\nWe would like to acknowledge 九宫格 of Chongqing Telecom for their assistance.\n\nEntry added October 26, 2026\n\n### dcerpc\n\nWe would like to acknowledge Surya Narayan Kushwaha for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Nebula Security (@nebusecurity) for their assistance.\n\n### quarantine\n\nWe would like to acknowledge an anonymous researcher for their assistance.\n\n### Quick Look\n\nWe would like to acknowledge Peter Malone for their assistance.\n\n### rapportd\n\nWe would like to acknowledge Tae Woo Kim for their assistance.\n\n### Shortcuts\n\nWe would like to acknowledge Owen Pawling (@owenpawling) for their assistance.\n\n### Virtualization\n\nWe would like to acknowledge Ye Zhang (@VAR10CK) of Baidu Security for their assistance.\n\n### WindowServer\n\nWe would like to acknowledge Jex Amro for their assistance.\n\n### xar\n\nWe would like to acknowledge Matthew Dean for their assistance.\n\n Published Date: October 26, 2026","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":27519,"url":"https://support.apple.com/en-us/149043","title":"Apple: About the security content of macOS Sequoia 15.8 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Sequoia 15.8 - Apple Support\n\n# About the security content of macOS Sequoia 15.8\n\nThis document describes the security content of macOS Sequoia 15.8.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Sequoia 15.8\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: macOS Sequoia\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accessibility\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious Software, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma (@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\n### Accounts\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### AMD\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to elevate privileges\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-28853: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: macOS Sequoia\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### AppKit\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Lehan Dilusha Jayasingha (Sri Lanka), Jasminder Pal Singh, Dem0ns (@天府简易信工作室), Abdelhak Kherroubi\n\n### Apple Neural Engine\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65408: tamdao\n\n### AppleAVD\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleMobileFileIntegrity\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### ATS\n\nImpact: An app may be able to read files outside of its sandbox\n\nDescription: A permissions issue was addressed by removing the vulnerable code.\n\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\n### ATS\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Mohamad Dawoud / Abodi Dawoud, Ahmed Alwardani\n\n### Audio\n\nImpact: An app may be able to leak sensitive user information\n\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin\n\n### AuthKit\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### autofs\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### Automator\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84535: Sindre Sorhus, Oren Yomtov, Morris Richman (@morrisinlife), Kun Peeks (@SwayZGl1tZyyy)\n\n### AVEVideoEncoder\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84613: jioundai\n\nEntry added October 19, 2026\n\n### cd9660\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, 정우 하 (@0xfa11babe), Suresh Sundaram, Surej Sekhar, Kun Peeks (@SwayZGl1tZyyy), Hari Shanmugam (The Hxr1), Ataberk Yavuzer\n\n### configd\n\nAvailable for: macOS Sequoia\n\nImpact: An app with admin privileges may be able to modify the System Keychain\n\nDescription: An authorization issue was addressed with improved entitlement checks.\n\nCVE-2026-86907: Roman Zabicki\n\nEntry added October 19, 2026\n\n### copyfile\n\nAvailable for: macOS Sequoia\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### Core Bluetooth\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### CoreDrag\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreMedia Video Toolbox\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\n### CoreML\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nImpact: A malicious application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreText\n\nImpact: Processing web content may lead to a denial-of-service\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreTypes\n\nImpact: A malicious app may be able to break out of its sandbox\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nCVE-2026-84511: stratan (@5tratan), Rahul Raj\n\n### CUPS\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nCVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, 章鱼哥@aipy （aipyaipy.com）, instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com\n\n### CUPS\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84554: Meshaal @ Darkcov, Joseph Shamoon\n\n### CUPS\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: An app may be able to gain elevated privileges\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43691: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nImpact: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84516: 章鱼哥@aipy (aipyaipy.com）\n\n### CUPS\n\nImpact: An application may be able to access restricted files\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-84541: 章鱼哥@aipy (aipyaipy.com）\n\n### DesktopServices\n\nImpact: Opening a file referencing a network share may lead to unexpected software execution\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84579: Thiago Mayllart\n\nEntry added October 19, 2026\n\n### DeviceCheck\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### Directory Utility\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to gain root privileges\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84505: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: Processing a maliciously crafted disk image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84565: Nathaniel Oh (@calysteon)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), flower xu, Adriatik Raci, PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84550: Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-65362: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Adriatik Raci, Manish Bhatt, Amazon Leo Security, Nathaniel Oh (@calysteon)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84512: Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### exFAT\n\nImpact: Mounting a maliciously crafted volume may lead to unexpected system termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84510: Richard Zana, Meta Red Team X - Nik Tsytsarkin\n\n### File Bookmark\n\nImpact: An app may be able to modify a file it only had permission to read\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43785: Junyeong Lee (jylab.github.io), Merrick Hare, Narendra Singh (@_3P1C), John Nzyuko Uvyu, Aditya Kumar\n\n### file_cmds\n\nImpact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-84534: Geoffrey Lovelace\n\n### FontParser\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84524: an anonymous researcher\n\n### Foundation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Game Center\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84618: Luke Symons\n\n### GPU Drivers\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86981: f00l (@PPPF00L) and 3ndy1 (@_3ndy1)\n\nEntry added October 19, 2026\n\n### Graphics\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang\n\n### Heimdal\n\nImpact: A user in a privileged network position may be able to leak sensitive user information\n\nCVE-2022-3437: Roman Zabicki\n\n### Heimdal\n\nCVE-2026-86868: Redon Gashi of Sentry\n\nEntry added October 19, 2026\n\n### HFS\n\nImpact: Mounting a malicious disk image may cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28934: Arni Hardarson (Neonix Security), Tristan Madani (@TristanInSec) from Talence Security, 정우 하, Aswin Kumar Gokulakannan, Peter Malone, Dun\n\n### HFS\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84581: Jonathan Bar Or (@yo_yo_yo_jbo), Feng Xue and XGPT of ThreatBook, Alfredo Pesoli (@__rev) of Bynar.io\n\n### Image Capture\n\nCVE-2026-64756: Luke Symons\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nCVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\nCVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)\n\n### ImageIO\n\nImpact: Processing an image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65346: Meta Red Team X - Nik Tsytsarkin\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in memory corruption\n\nCVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nCVE-2026-64759: Musaab Khan (@bxff), XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine, Guannan Wang, Zhanpeng Liu, Jiashuo Liang, Guancheng Li, Iain Harkiss, Daniel Febrero\n\nEntry added October 26, 2026\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84627: Piotr Jerzy Duszynski, Mateusz Jurczyk of Google Project Zero, ธนกฤต ทัฬหะ, Rahul Raj, PETOWORKS의 Bugeun Choi (@Bugeun), f0r of MurphySec\n\nEntry added October 26, 2026\n\n### IOAcceleratorFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86944: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### IOKit\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영\n\n### IOMobileFrameBuffer\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-64736: Ruslan Dautov, hxr1\n\n### Kernel\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84566: Bernhard Jackiewicz\n\n### Kernel\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: Svetoslav Stolarov, Josh Maine of Calif.io, genter0, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84619: James Duffy (@0x4A616D657344), genter0, Eddy Tsalolikhin\n\n### Kernel\n\nAvailable for: macOS Sequoia\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84549: Surya Narayan Kushwaha, Aswin Kumar Gokulakannan\n\n### Kernel\n\nImpact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43790: Omar Cerrito\n\n### Kernel\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Ye Zhang (@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: A malicious application may bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-65369: an anonymous researcher\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84544: Surya Narayan Kushwaha, Abhijeet Singh (www.linkedin.com/in/abhiunix/)\n\n### Kernel\n\nImpact: An app may be able to gain root privileges\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86917: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-43684: Peter Malone\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nCVE-2026-43686: Peter Malone\n\n### Kernel\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84538: Stuart Thomas\n\n### Kernel\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nCVE-2026-65364: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\nCVE-2026-65349: an anonymous researcher\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65330: Ashish Kunwar, Mikhail Lozhnikov of Positive Technologies, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\nCVE-2026-28935: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84599: an anonymous researcher\n\nEntry updated October 26, 2026\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84521: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84517: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-65371: Vladislav Shevchenko (Positive Technologies)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01\n\nEntry added October 19, 2026\n\n### Kernel\n\nEntry added October 26, 2026\n\n### Kernel\n\nCVE-2026-86916: Wang Yu\n\nEntry added October 26, 2026\n\n### Kext Management\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-84514: Mohamed Wedatalla, Nathaniel Oh (@calysteon), Arjanit Isufi\n\n### Keychain Access\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84556: Peter Malone, HvxyZLF, Chris Bailey - Short Circuit, Adrián Díaz Aguilar\n\n### LaunchServices\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-65382: an anonymous researcher\n\n### Mail\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-84573: Dawuge of Shuffle Team\n\n### Mail\n\nAvailable for: macOS Sequoia\n\nImpact: An attacker in a privileged network position may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-43787: Armend Gashi\n\n### mDNSResponder\n\nImpact: An app may be able to access sensitive network connection information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-86914: Richard Zana\n\nEntry added October 19, 2026\n\n### Messages\n\nImpact: An app may be able to access protected user data\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-43741: Dawuge of Shuffle Team\n\n### Messages\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-86959: an anonymous researcher\n\nEntry added October 19, 2026\n\n### Model I/O\n\nImpact: Opening a maliciously crafted file may lead to unexpected process termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84497: Yiğit Can YILMAZ (@yilmazcanyigit)\n\n### Multi-Touch\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65372: 이재영\n\nEntry added October 19, 2026\n\n### NetworkExtension\n\nImpact: An app may be able to identify what other apps a user has installed\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84626: Hoffcona of IES Red Team\n\nEntry updated October 19, 2026\n\n### NetworkExtension\n\nCVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\n### odproxyd\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-64712: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### quarantine\n\nCVE-2026-84580: an anonymous researcher\n\n### quarantine\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84578: Kenneth Chew\n\n### QuartzCore\n\nCVE-2026-84576: Dora Orak, @Ethan Arbuckle, and @leptos_null\n\n### Quick Look\n\nImpact: Processing a maliciously crafted document may lead to an out-of-bounds read\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84548: Peter Malone\n\n### RealityKit\n\nImpact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n\nCVE-2026-84532: Franco Belman at Blackwing Intelligence, Hongsik Kim (mnur), stratan (@5tratan)\n\nEntry updated October 26, 2026\n\n### RealityKit\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-28966: stratan (@5tratan)\n\n### Reminders\n\nCVE-2026-65403: Rahul Raj\n\n### Sandbox\n\nCVE-2026-84555: Liu Xue & 九宫格 of Chongqing Telecom\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84632: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nCVE-2026-84487: stratan (@5tratan), Peter Malone, Dhiyanesh Selvaraj (@redroot97)\n\n### SceneKit\n\nCVE-2026-65413: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84620: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\nCVE-2026-84611: Nathaniel Oh (@calysteon)\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43697: an anonymous researcher, Peter Malone\n\nEntry updated October 26, 2026\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84526: stratan (@5tratan)\n\n### Security\n\nImpact: An attacker in a privileged network position may be able to intercept network traffic\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\nCVE-2026-86889: Jaeho Nam, Jungbum Lee, Sangwi Kang, Hyeonguk Ko and Taekyoung Kwon from SNU CSE MMLAB (mmlab.snu.ac.kr)\n\n### Security\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\nCVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: A shortcut may be able to access sensitive user data without permission\n\nDescription: A permissions issue was addressed with improved state management.\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: A shortcut may be able to access sensitive user data without permission\n\nDescription: A privacy issue was addressed with improved state management.\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: A shortcut may be able to transmit data before user authorization is granted\n\nDescription: An authorization issue was addressed with improved state management.\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management\n\nCVE-2026-28850: OSORI\n\nEntry added October 26, 2026\n\n### Siri\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An access issue was addressed with improved access controls.\n\nCVE-2026-65356: Ricardo Prado\n\nEntry added October 19, 2026\n\n### SMB\n\nImpact: Mounting a maliciously crafted SMB network share may lead to system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43719: Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: A local user may be able to read kernel memory\n\nDescription: A race condition was addressed with improved locking.\n\nCVE-2026-43690: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65376: 재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-84543: Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nDescription: An integer underflow was addressed with improved input validation.\n\nCVE-2026-84536: 재영 정, Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84537: Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: Connecting to a malicious SMB share may disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65365: Jay Patel, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to kernel memory corruption\n\nCVE-2026-84515: 재영 정, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nCVE-2026-84509: Dave G.\n\n### SMB\n\nImpact: An attacker with control of a network file server may be able to cause unexpected system termination\n\nCVE-2026-86871: John Lussier, Cem Onat Karagun, Ashish Kunwar\n\nEntry added October 19, 2026\n\n### smbx\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84553: Stuart Thomas\n\n### Software Update\n\nCVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team\n\n### SoftwareUpdate\n\nCVE-2026-65361: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova\n\n### Spotlight\n\nCVE-2026-28930: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Spotlight\n\nCVE-2026-65378: 杉山 壮太, AL Najafi, Richard Zana, Abodi Dawoud, Sindre Sorhus, 糖豆爸爸(@晴天组织), Niels Hofmans, Robert Mindo\n\nEntry updated October 26, 2026\n\n### Spotlight\n\nCVE-2026-84621: Abodi Dawoud, Ujjwal Reddy Kalvolu Sreenivasa Reddy, Johan Wahyudi, Armend Gashi\n\n### Storage\n\nCVE-2026-65345: 이재영, Seung Je Seong, Jakob Pammer, Ilya Andr (andrd3v) of Positive Technologies\n\n### Storage\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-65348: Jérôme Djouder\n\n### StorageKit\n\nCVE-2026-43791: Amy (amys.website), Meridian Miftari, Aaron Grattafiori - NVIDIA AI Red Team\n\n### Symptom Framework\n\nImpact: A malicious application may be able to determine a user's current location\n\nCVE-2026-84513: Sindre Sorhus\n\n### TCC\n\nCVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84572: Tomi (tk0) Koski (@tomikoski), Hari Shanmugam (The Hxr1)\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-84506: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: Connecting to a malicious WebDAV server may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-43677: Joseph Semaan, bubu, Omar Cerrito, HE WEI (ギカク), Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved authentication.\n\nCVE-2026-65375: YingMuo (@YingMuo) of DEVCORE Research Team, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### WebDAV\n\nAvailable for: macOS Sequoia\n\nImpact: Connecting to a malicious WebDAV server may result in code execution\n\nDescription: A memory corruption issue was addressed with improved validation.\n\nCVE-2026-65374: HE WEI（ギカク）, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### WebDAV\n\nAvailable for: macOS Sequoia\n\nImpact: An app may bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-28899: Kraken Cryptocurrency Exchange, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Wi-Fi\n\nAvailable for: macOS Sequoia\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86957: Niels Hofmans, Drin Raci of sentry.security\n\nEntry added October 19, 2026\n\n### WindowServer\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: The issue was addressed with improved handling of secure input state.\n\nCVE-2026-65379: Ricardo Prado\n\nEntry added October 19, 2026\n\n### XPC\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84617: Stuart Wallace\n\n## Additional recognition\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### Compression\n\nWe would like to acknowledge Tommy DeVoss from Braze Security Team (@thedawgyg) for their assistance.\n\n### CUPS\n\nWe would like to acknowledge Aaron Grattafiori - NVIDIA AI Red Team for their assistance.\n\n### dcerpc\n\nWe would like to acknowledge Surya Narayan Kushwaha for their assistance.\n\n### ImageIO\n\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy) and songbird for their assistance.\n\nEntry updated October 19, 2026\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Yongsong Yu for their assistance.\n\nEntry updat","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":27515,"url":"https://support.apple.com/en-us/149035","title":"Apple: About the security content of macOS Golden Gate 27 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Golden Gate 27 - Apple Support\n\n# About the security content of macOS Golden Gate 27\n\nThis document describes the security content of macOS Golden Gate 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Golden Gate 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### afpfs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86940: Dave G.\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Intents\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Apple Intelligence security prompts\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84601: Nick Cook, Sentry Flag\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to delete files for which it does not have privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-86877: Hyunwoo Kim (@v4bel)\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84595: tamdao\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleFDEKeyStore\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84520: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### AppleMobileFileIntegrity\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-84584: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84522: Mickey Jin (@patch1t)\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Ahmed Alwardani, Mohamad Dawoud / Abodi Dawoud\n\n### Authentication Services\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to delete credentials stored in Keychain\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86905: Ilya Andr (andrd3v)\n\n### AuthKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### Automator\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84535: Kun Peeks (@SwayZGl1tZyyy), Oren Yomtov, Morris Richman (@morrisinlife), Sindre Sorhus\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logic issue was addressed with improved validation.\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84560: an anonymous researcher\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-84631: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### BOM\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nEntry added October 26, 2026\n\n### Carbon Core\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nCVE-2026-84528: zenith\n\nEntry added October 26, 2026\n\n### cd9660\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, Ataberk Yavuzer, 정우 하 (@0xfa11babe), Kun Peeks (@SwayZGl1tZyyy), Surej Sekhar, Suresh Sundaram, Hari Shanmugam (The Hxr1)\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-86966: Jihwan Yoon\n\nEntry added October 26, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\nEntry added October 26, 2026\n\n### CoreDrag\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed by removing the vulnerable code.\n\nCVE-2026-64752: Nik Tsytsarkin\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreML\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreServicesUIAgent\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted disk image may bypass Gatekeeper checks\n\nCVE-2026-65368: an anonymous researcher\n\nEntry added October 26, 2026\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing web content may lead to a denial-of-service\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84596: ret2happy, Meta Product Security\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84571: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\nCVE-2026-34979: Tristan Madani (@TristanInSec) from Talence Security, Юлия Мерцалова\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: An injection issue was addressed with improved validation.\n\nCVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain elevated privileges\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: An integer overflow was addres","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":27521,"url":"https://support.apple.com/en-us/149037","title":"Apple: About the security content of watchOS 27 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of watchOS 27 - Apple Support\n\n# About the security content of watchOS 27\n\nThis document describes the security content of watchOS 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## watchOS 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### APFS\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### App Store\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### App Intents\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### Apple Account\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### AppleAVD\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### Audio\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin\n\n### AuthKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### AVEVideoEncoder\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84560: an anonymous researcher\n\n### Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84613: jioundai\n\nEntry added October 19, 2026\n\n### CloudKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-86895: Stanislav Jelezoglo\n\n### CloudKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to read device name\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86893: Heiner Gerdes\n\n### copyfile\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### Core Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\nEntry added October 26, 2026\n\n### CoreMedia\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreMotion\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreText\n\nImpact: Processing web content may lead to a denial-of-service\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreText\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84596: ret2happy, Meta Product Security\n\n### CoreUI\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84571: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### DeviceCheck\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### FontParser\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84524: an anonymous researcher\n\n### FontParser\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-84597: Nik Tsytsarkin\n\n### Foundation\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Graphics\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang\n\n### Heimdal\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in a privileged network position may be able to modify network traffic\n\nDescription: A cryptographic issue was addressed with improved integrity checks.\n\nCVE-2026-84533: Vishal Patidar, Roman Zabicki\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nCVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing an image may lead to a denial-of-service\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65347: Geonha Lee (@leegn4a)\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing an image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65346: Meta Red Team X - Nik Tsytsarkin\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86975: Tommy DeVoss from Braze Security Team (@thedawgyg), an anonymous researcher\n\nEntry added October 19, 2026\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86954: Mateusz Jurczyk of Google Project Zero\n\nEntry added October 26, 2026\n\n### IOGPUFamily\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64788: Chanwit Muenprakoddee (ChemIndy), an anonymous researcher, f00l (@PPPF00L) and 3ndy1(@_3ndy1) and Minghao Lin@Y1nkoc and 云散花折, Arjanit Isufi\n\nEntry updated October 19, 2026\n\n### IOKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영\n\n### IOMobileFrameBuffer\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-65398: Chris Bailey - Short Circuit, Mustafa Calap (@ordinal0, dbg.re), David Strnadel, Meta Red Team X - Nik Tsytsarkin\n\nCVE-2026-64736: Ruslan Dautov, hxr1\n\n### IOSurfaceAccelerator\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to leak sensitive kernel state\n\nDescription: An information leakage was addressed with additional validation.\n\nCVE-2026-64760: an anonymous researcher, Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: genter0, Svetoslav Stolarov, Josh Maine of Calif.io, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65415: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65343: Drinor Selmanaj (Sentry), Surya Narayan Kushwaha\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\nCVE-2026-65349: an anonymous researcher\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ye Zhang (@VAR10CK) of Baidu Security\n\n### Kernel\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43687: R4mbb of KRsecurity, Peter Malone\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nCVE-2026-43686: Peter Malone\n\n### Kernel\n\nImpact: An app may be able to determine kernel memory layout\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: An information disclosure issue was addressed with improved memory management.\n\nCVE-2026-84530: Vladislav Shevchenko (Positive Technologies)\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\nCVE-2026-86903: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65330: Ashish Kunwar, Mikhail Lozhnikov of Positive Technologies, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\nCVE-2026-28935: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84599: an anonymous researcher\n\nEntry updated October 26, 2026\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01\n\nEntry added October 19, 2026\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-86964: Ryan Hileman via Xint Code (xint.io)\n\nEntry added October 26, 2026\n\n### libarchive\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-86870: Kitten Food\n\n### MediaRemote\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A sandboxed app may be able to access the System Keychain\n\nCVE-2026-84628: Myeonghun Pak, Nathaniel Oh (@calysteon), Alan Banderas (@creeper4004)\n\n### NetworkExtension\n\nAvailable for: Apple Watch Series 9 and later\n\nCVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\n### NetworkExtension\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to identify what other apps a user has installed\n\nCVE-2026-84626: Hoffcona of IES Red Team\n\nEntry updated October 19, 2026\n\n### Photos Storage\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84491: an anonymous researcher\n\n### Photos Storage\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to fingerprint the user\n\nCVE-2026-84629: Stanislav Jelezoglo\n\n### Reminders\n\nAvailable for: Apple Watch Series 9 and later\n\nCVE-2026-65403: Rahul Raj\n\n### Sandbox\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to bypass network restrictions\n\nCVE-2026-84551: Issa Sancho\n\n### Sandbox Profiles\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional sandbox restrictions.\n\nCVE-2026-84625: Ilya Andr (andrd3v) of Positive Technologies, CJ Vana\n\n### Sandbox Profiles\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84603: Gongyu Ma (@Mezone0), CJ Vana, Stanislav Jelezoglo\n\n### SceneKit\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84487: stratan (@5tratan), Dhiyanesh Selvaraj (@redroot97), Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84632: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84620: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\nCVE-2026-84611: Nathaniel Oh (@calysteon)\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nCVE-2026-84526: stratan (@5tratan)\n\n### Security\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nCVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak\n\n### Shortcuts\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A malicious shortcut may be able to send messages without user confirmation\n\nCVE-2026-84600: Owen Pawling (@owenpawling)\n\n### Siri\n\nAvailable for: Apple Watch Series 9 and later\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86884: Stanislav Jelezoglo, Gongyu Ma (twitter @Mezone0)\n\n### Software Update\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to modify protected system files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team\n\n### Symptom Framework\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A malicious application may be able to determine a user's current location\n\nDescription: A privacy issue was addressed with improved private data redaction for log entries.\n\nCVE-2026-84513: Sindre Sorhus\n\n### TCC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to modify protected system files\n\nDescription: A path traversal issue was addressed with improved input validation.\n\nCVE-2026-86886: Constantin Clerc, Shad J, huami1314 (@huamidev), Huy Nguyen (@34306) of Calif.io, an anonymous researcher\n\n### TCC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom\n\n### Watch App\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to track users across apps and websites without permission\n\nDescription: A privacy issue was addressed with improved state management.\n\nCVE-2026-86904: Stanislav Jelezoglo\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process termination\n\nDescription: A logic issue was addressed with improved state management.\n\nWebKit Bugzilla: 310457\n\nCVE-2026-84635: Souta Sugiyama\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 318405\n\nCVE-2026-65341: Henock Habte\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may disclose sensitive user information\n\nDescription: A permissions issue was addressed by removing the vulnerable code.\n\nWebKit Bugzilla: 315121\n\nCVE-2026-64753: Viggo Lekdorf\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 316347\n\nCVE-2026-64715: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313703\n\nCVE-2026-64787: 杉山 壮太, Shubham Chaskar\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 317317\n\nCVE-2026-43794: Dung Do (@_piers2) of Calif.io\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to unexpected behavior\n\nDescription: A logic issue was addressed with improved state management.\n\nWebKit Bugzilla: 318807\n\nCVE-2026-86872: Junhyuk Im of S2W Inc, Seungyun Lee of S2W Inc\n\nEntry updated October 19, 2026\n\n### WebKit History\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Visiting a maliciously crafted website may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 322124\n\nCVE-2026-64778: Mohit Negi\n\n### WebRTC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65391: Myungyong Lee\n\n### WebRTC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65390: Kwak Kiyong (@Pwnkai23), Song Nuri\n\n### Wi-Fi\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in physical proximity may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86953: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Jakob Pammer\n\nEntry added October 19, 2026, updated October 26, 2026\n\n### Wi-Fi\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86957: Drin Raci of sentry.security, Niels Hofmans\n\nEntry updated October 19, 2026\n\n### Wi-Fi Connectivity\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84636: Sindre Sorhus, Jian Lee (@speedyfriend433)\n\nEntry updated October 19, 2026\n\n## Additional recognition\n\n### Accounts\n\nWe would like to acknowledge Wojciech Regula of SecuRing (wojciechregula.blog) for their assistance.\n\n### AppleKeyStore\n\nWe would like to acknowledge Abdurrahman Nafi, Francisco Knabe, Karol Mazurek (@Karmaz95) of AFINE, Somair Ansar, YOKI, an anonymous researcher, 晓娟 谢 for their assistance.\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### CloudKit\n\nWe would like to acknowledge Hikerell (Loadshine Lab) for their assistance.\n\n### Compression\n\nWe would like to acknowledge Tommy DeVoss from Braze Security Team (@thedawgyg) for their assistance.\n\n### CoreBluetooth - LE\n\nWe would like to acknowledge Ashmit Sharma & Atul RV, Dun, Maliq Barnard, Nicholas C. of Onymos Inc. (onymos.com), Peter Malone, Robert M for their assistance.\n\n### CoreGraphics\n\nWe would like to acknowledge Gandalf4a of PKU-Changsha Institute for Computing and Digital Economy for their assistance.\n\n### CoreMedia\n\nWe would like to acknowledge Chris Bailey - Short Circuit for their assistance.\n\n### CoreUI\n\nWe would like to acknowledge Peter Malone for their assistance.\n\n### DataAccess\n\nWe would like to acknowledge Adetayo Adebimpe (Cyboghostginx) for their assistance.\n\n### FaceTime\n\nWe would like to acknowledge Souhaib Naceri for their assistance.\n\n### iCloud\n\nWe would like to acknowledge 3ndy1(@_3ndy1) and moyu for their assistance.\n\n### ImageIO\n\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy), Ronen Seleri & Shahaf Pruss, songbird for their assistance.\n\nEntry updated October 19, 2026\n\n### IOMobileFrameBuffer\n\nWe would like to acknowledge Iain Harkiss, Jian Lee (@speedyfriend433) for their assistance.\n\n### IOSurfaceAccelerator\n\nWe would like to acknowledge Chanwit Muenprakoddee (ChemIndy), Franco Belman at Blackwing Intelligence, Iain Harkiss, an anonymous researcher, beist, hxr1 for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Bhaswanth Chigurupati, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Cem Onat Karagun, James Duffy (@0x4A616D657344), Lyutoon, N.M.Praveen Nawarathne (@zblockrat), Nebula Security (@nebusecurity), Nicolas Seriot, Peter Malone, Redon Gashi of Sentry, Robert Tran, Xiang Li from AOSP Lab @Nankai University, Yongsong Yu, an anonymous researcher for their assistance.\n\nEntry updated October 26, 2026\n\n### Mail\n\nWe would like to acknowledge Himanshu Bharti (@Xpl0itme) From Khatima for their assistance.\n\n### mDNSResponder\n\nWe would like to acknowledge Hannes Weissteiner, Roland Czerny, Simone Franza, Stefan Gast and Daniel Gruss of Graz University of Technology, and Johanna Ullrich of the Interdisciplinary Transformation University (IT:U), Issa Sancho, Jian Zhou, and Sindre Sorhus for their assistance.\n\nEntry updated October 19, 2026\n\n### Notifications\n\nWe would like to acknowledge Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India, Himanshu Bharti @Xpl0itme From Khatima, Jan Rokita (rokita.me) for their assistance.\n\n### Passwords\n\nWe would like to acknowledge Catalin Lita of Moralis, Christian Kohlschütter, David Coomber of Info-Sec.CA, Lukasz Tulikowski at Software Cloud, Sujay Amin, an anonymous researcher for their assistance.\n\n### RemoteServiceDiscovery\n\nWe would like to acknowledge Tristan Madani (@TristanInSec) from Talence Security, an anonymous researcher for their assistance.\n\n### Security\n\nWe would like to acknowledge John Lussier, Masahiro Kawada (@kawakatz), Roman Zabicki for their assistance.\n\nWe would like to acknowledge Atul Kishor Jaiswal, Benjamin Hornbeck for their assistance.\n\n### Shortcuts\n\nWe would like to acknowledge Owen Pawling (@owenpawling) for their assistance.\n\n### VoiceOver\n\nWe would like to acknowledge Hariji Vivek Pandey for their assistance.\n\n### Wallet\n\nWe would like to acknowledge an anonymous researcher for their assistance.\n\n### WebKit\n\nWe would like to acknowledge @TristanInSec, Maher Azzouzi, Meridian Miftari, OpenAI Codex Security - Amy Burnett, ret2happy, wwwlk for their assistance.\n\n### WebKit Canvas\n\nWe would like to acknowledge Utkarsh Pal for their assistance.\n\n### Wi-Fi\n\nWe would like to acknowledge E Vestavik (@Dynasty) for their assistance.\n\nInformation about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.\n\n Published Date: October 26, 2026","published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":27515,"url":"https://support.apple.com/en-us/149035","title":"Apple: About the security content of macOS Golden Gate 27 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Golden Gate 27 - Apple Support\n\n# About the security content of macOS Golden Gate 27\n\nThis document describes the security content of macOS Golden Gate 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Golden Gate 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영\n\n### Accounts\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### afpfs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86940: Dave G.\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Intents\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### Apple Account\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Apple Intelligence security prompts\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84601: Nick Cook, Sentry Flag\n\n### Apple Intelligence\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86920: Johan Wahyudi\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84634: S. Rosario\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to delete files for which it does not have privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-86877: Hyunwoo Kim (@v4bel)\n\nEntry added October 26, 2026\n\n### Apple Neural Engine\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84595: tamdao\n\nEntry added October 26, 2026\n\n### AppleAVD\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleFDEKeyStore\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84520: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### AppleMobileFileIntegrity\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-84584: Mickey Jin (@patch1t)\n\n### Archive Utility\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84522: Mickey Jin (@patch1t)\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Ahmed Alwardani, Mohamad Dawoud / Abodi Dawoud\n\n### Authentication Services\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to delete credentials stored in Keychain\n\nDescription: This issue was addressed by removing the vulnerable code.\n\nCVE-2026-86905: Ilya Andr (andrd3v)\n\n### AuthKit\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### autofs\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### Automator\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84535: Kun Peeks (@SwayZGl1tZyyy), Oren Yomtov, Morris Richman (@morrisinlife), Sindre Sorhus\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logic issue was addressed with improved validation.\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84560: an anonymous researcher\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-84631: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nEntry added October 19, 2026\n\n### BOM\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted ZIP archive may bypass Gatekeeper checks\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\nEntry added October 26, 2026\n\n### Carbon Core\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nCVE-2026-84528: zenith\n\nEntry added October 26, 2026\n\n### cd9660\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, Ataberk Yavuzer, 정우 하 (@0xfa11babe), Kun Peeks (@SwayZGl1tZyyy), Surej Sekhar, Suresh Sundaram, Hari Shanmugam (The Hxr1)\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### copyfile\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: This issue was addressed with improved handling of symlinks.\n\nCVE-2026-86966: Jihwan Yoon\n\nEntry added October 26, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### Core Bluetooth\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\nEntry added October 26, 2026\n\n### CoreDrag\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nDescription: A memory corruption issue was addressed by removing the vulnerable code.\n\nCVE-2026-64752: Nik Tsytsarkin\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreML\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nDescription: An authorization issue was addressed with improved validation.\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A malicious application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreServicesUIAgent\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A maliciously crafted disk image may bypass Gatekeeper checks\n\nCVE-2026-65368: an anonymous researcher\n\nEntry added October 26, 2026\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing web content may lead to a denial-of-service\n\nDescription: A null pointer dereference was addressed with improved input validation.\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreText\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84596: ret2happy, Meta Product Security\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84489: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84571: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may result in disclosure of process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43738: Peter Malone\n\n### CoreUI\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.\n\nCVE-2026-34979: Tristan Madani (@TristanInSec) from Talence Security, Юлия Мерцалова\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain root privileges\n\nDescription: An injection issue was addressed with improved validation.\n\nCVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An app may be able to gain elevated privileges\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nDescription: A validation issue was addressed with improved input sanitization.\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nAvailable for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: An integer overflow was addres","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27521,"url":"https://support.apple.com/en-us/149037","title":"Apple: About the security content of watchOS 27 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of watchOS 27 - Apple Support\n\n# About the security content of watchOS 27\n\nThis document describes the security content of watchOS 27.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## watchOS 27\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accelerate Framework\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86918: Arni Hardarson (Neonix Security)\n\nEntry added October 19, 2026\n\n### Accessibility\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)\n\n### APFS\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### App Store\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### App Intents\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A privacy issue was addressed with improved access restrictions.\n\nCVE-2026-84582: Zhongcheng Li (CK01)\n\nEntry added October 19, 2026\n\n### Apple Account\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A malicious application may be able to leak sensitive user information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)\n\n### AppleAVD\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### Audio\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin\n\n### AuthKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### AVEVideoEncoder\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may gain unauthorized access to Bluetooth\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84560: an anonymous researcher\n\n### Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84613: jioundai\n\nEntry added October 19, 2026\n\n### CloudKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-86895: Stanislav Jelezoglo\n\n### CloudKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to read device name\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86893: Heiner Gerdes\n\n### copyfile\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### Core Bluetooth\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nImpact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory\n\nCVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien\n\nEntry added October 26, 2026\n\n### CoreMedia\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreMotion\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreText\n\nImpact: Processing web content may lead to a denial-of-service\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreText\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84596: ret2happy, Meta Product Security\n\n### CoreUI\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84571: stratan (@5tratan), Peter Malone\n\n### CoreUI\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84511: Rahul Raj, stratan (@5tratan)\n\n### DeviceCheck\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### FontParser\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84524: an anonymous researcher\n\n### FontParser\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted font may result in the disclosure of process memory\n\nDescription: An out-of-bounds read issue was addressed with improved input validation.\n\nCVE-2026-84597: Nik Tsytsarkin\n\n### Foundation\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Graphics\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang\n\n### Heimdal\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in a privileged network position may be able to modify network traffic\n\nDescription: A cryptographic issue was addressed with improved integrity checks.\n\nCVE-2026-84533: Vishal Patidar, Roman Zabicki\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nCVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing an image may lead to a denial-of-service\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-65347: Geonha Lee (@leegn4a)\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing an image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65346: Meta Red Team X - Nik Tsytsarkin\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86975: Tommy DeVoss from Braze Security Team (@thedawgyg), an anonymous researcher\n\nEntry added October 19, 2026\n\n### ImageIO\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86954: Mateusz Jurczyk of Google Project Zero\n\nEntry added October 26, 2026\n\n### IOGPUFamily\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-64788: Chanwit Muenprakoddee (ChemIndy), an anonymous researcher, f00l (@PPPF00L) and 3ndy1(@_3ndy1) and Minghao Lin@Y1nkoc and 云散花折, Arjanit Isufi\n\nEntry updated October 19, 2026\n\n### IOKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영\n\n### IOMobileFrameBuffer\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-65398: Chris Bailey - Short Circuit, Mustafa Calap (@ordinal0, dbg.re), David Strnadel, Meta Red Team X - Nik Tsytsarkin\n\nCVE-2026-64736: Ruslan Dautov, hxr1\n\n### IOSurfaceAccelerator\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to leak sensitive kernel state\n\nDescription: An information leakage was addressed with additional validation.\n\nCVE-2026-64760: an anonymous researcher, Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: genter0, Svetoslav Stolarov, Josh Maine of Calif.io, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65415: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ryan Hileman via Xint Code (xint.io)\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65343: Drinor Selmanaj (Sentry), Surya Narayan Kushwaha\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\nCVE-2026-65349: an anonymous researcher\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ye Zhang (@VAR10CK) of Baidu Security\n\n### Kernel\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43687: R4mbb of KRsecurity, Peter Malone\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nCVE-2026-43686: Peter Malone\n\n### Kernel\n\nImpact: An app may be able to determine kernel memory layout\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: An information disclosure issue was addressed with improved memory management.\n\nCVE-2026-84530: Vladislav Shevchenko (Positive Technologies)\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\nCVE-2026-86903: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65330: Ashish Kunwar, Mikhail Lozhnikov of Positive Technologies, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\nCVE-2026-28935: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84599: an anonymous researcher\n\nEntry updated October 26, 2026\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved checks.\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01\n\nEntry added October 19, 2026\n\n### Kernel\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-86964: Ryan Hileman via Xint Code (xint.io)\n\nEntry added October 26, 2026\n\n### libarchive\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-86870: Kitten Food\n\n### MediaRemote\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A sandboxed app may be able to access the System Keychain\n\nCVE-2026-84628: Myeonghun Pak, Nathaniel Oh (@calysteon), Alan Banderas (@creeper4004)\n\n### NetworkExtension\n\nAvailable for: Apple Watch Series 9 and later\n\nCVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\n### NetworkExtension\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to identify what other apps a user has installed\n\nCVE-2026-84626: Hoffcona of IES Red Team\n\nEntry updated October 19, 2026\n\n### Photos Storage\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84491: an anonymous researcher\n\n### Photos Storage\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to fingerprint the user\n\nCVE-2026-84629: Stanislav Jelezoglo\n\n### Reminders\n\nAvailable for: Apple Watch Series 9 and later\n\nCVE-2026-65403: Rahul Raj\n\n### Sandbox\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to bypass network restrictions\n\nCVE-2026-84551: Issa Sancho\n\n### Sandbox Profiles\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to fingerprint the user\n\nDescription: A permissions issue was addressed with additional sandbox restrictions.\n\nCVE-2026-84625: Ilya Andr (andrd3v) of Positive Technologies, CJ Vana\n\n### Sandbox Profiles\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84603: Gongyu Ma (@Mezone0), CJ Vana, Stanislav Jelezoglo\n\n### SceneKit\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84487: stratan (@5tratan), Dhiyanesh Selvaraj (@redroot97), Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84632: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84620: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\nCVE-2026-84611: Nathaniel Oh (@calysteon)\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nCVE-2026-84526: stratan (@5tratan)\n\n### Security\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nCVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak\n\n### Shortcuts\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A malicious shortcut may be able to send messages without user confirmation\n\nCVE-2026-84600: Owen Pawling (@owenpawling)\n\n### Siri\n\nAvailable for: Apple Watch Series 9 and later\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86884: Stanislav Jelezoglo, Gongyu Ma (twitter @Mezone0)\n\n### Software Update\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to modify protected system files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team\n\n### Symptom Framework\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: A malicious application may be able to determine a user's current location\n\nDescription: A privacy issue was addressed with improved private data redaction for log entries.\n\nCVE-2026-84513: Sindre Sorhus\n\n### TCC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to modify protected system files\n\nDescription: A path traversal issue was addressed with improved input validation.\n\nCVE-2026-86886: Constantin Clerc, Shad J, huami1314 (@huamidev), Huy Nguyen (@34306) of Calif.io, an anonymous researcher\n\n### TCC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom\n\n### Watch App\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to track users across apps and websites without permission\n\nDescription: A privacy issue was addressed with improved state management.\n\nCVE-2026-86904: Stanislav Jelezoglo\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process termination\n\nDescription: A logic issue was addressed with improved state management.\n\nWebKit Bugzilla: 310457\n\nCVE-2026-84635: Souta Sugiyama\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: The issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 318405\n\nCVE-2026-65341: Henock Habte\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may disclose sensitive user information\n\nDescription: A permissions issue was addressed by removing the vulnerable code.\n\nWebKit Bugzilla: 315121\n\nCVE-2026-64753: Viggo Lekdorf\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process crash\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 316347\n\nCVE-2026-64715: Hossein Lotfi (@hosselot) of TrendAI Zero Day Initiative\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to an unexpected process termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nWebKit Bugzilla: 313703\n\nCVE-2026-64787: 杉山 壮太, Shubham Chaskar\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nWebKit Bugzilla: 317317\n\nCVE-2026-43794: Dung Do (@_piers2) of Calif.io\n\n### WebKit\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to unexpected behavior\n\nDescription: A logic issue was addressed with improved state management.\n\nWebKit Bugzilla: 318807\n\nCVE-2026-86872: Junhyuk Im of S2W Inc, Seungyun Lee of S2W Inc\n\nEntry updated October 19, 2026\n\n### WebKit History\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Visiting a maliciously crafted website may leak sensitive data\n\nDescription: The issue was addressed with improved checks.\n\nWebKit Bugzilla: 322124\n\nCVE-2026-64778: Mohit Negi\n\n### WebRTC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65391: Myungyong Lee\n\n### WebRTC\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: Processing maliciously crafted web content may lead to memory corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65390: Kwak Kiyong (@Pwnkai23), Song Nuri\n\n### Wi-Fi\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in physical proximity may be able to cause a denial-of-service\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86953: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Jakob Pammer\n\nEntry added October 19, 2026, updated October 26, 2026\n\n### Wi-Fi\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86957: Drin Raci of sentry.security, Niels Hofmans\n\nEntry updated October 19, 2026\n\n### Wi-Fi Connectivity\n\nAvailable for: Apple Watch Series 9 and later\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84636: Sindre Sorhus, Jian Lee (@speedyfriend433)\n\nEntry updated October 19, 2026\n\n## Additional recognition\n\n### Accounts\n\nWe would like to acknowledge Wojciech Regula of SecuRing (wojciechregula.blog) for their assistance.\n\n### AppleKeyStore\n\nWe would like to acknowledge Abdurrahman Nafi, Francisco Knabe, Karol Mazurek (@Karmaz95) of AFINE, Somair Ansar, YOKI, an anonymous researcher, 晓娟 谢 for their assistance.\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### CloudKit\n\nWe would like to acknowledge Hikerell (Loadshine Lab) for their assistance.\n\n### Compression\n\nWe would like to acknowledge Tommy DeVoss from Braze Security Team (@thedawgyg) for their assistance.\n\n### CoreBluetooth - LE\n\nWe would like to acknowledge Ashmit Sharma & Atul RV, Dun, Maliq Barnard, Nicholas C. of Onymos Inc. (onymos.com), Peter Malone, Robert M for their assistance.\n\n### CoreGraphics\n\nWe would like to acknowledge Gandalf4a of PKU-Changsha Institute for Computing and Digital Economy for their assistance.\n\n### CoreMedia\n\nWe would like to acknowledge Chris Bailey - Short Circuit for their assistance.\n\n### CoreUI\n\nWe would like to acknowledge Peter Malone for their assistance.\n\n### DataAccess\n\nWe would like to acknowledge Adetayo Adebimpe (Cyboghostginx) for their assistance.\n\n### FaceTime\n\nWe would like to acknowledge Souhaib Naceri for their assistance.\n\n### iCloud\n\nWe would like to acknowledge 3ndy1(@_3ndy1) and moyu for their assistance.\n\n### ImageIO\n\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy), Ronen Seleri & Shahaf Pruss, songbird for their assistance.\n\nEntry updated October 19, 2026\n\n### IOMobileFrameBuffer\n\nWe would like to acknowledge Iain Harkiss, Jian Lee (@speedyfriend433) for their assistance.\n\n### IOSurfaceAccelerator\n\nWe would like to acknowledge Chanwit Muenprakoddee (ChemIndy), Franco Belman at Blackwing Intelligence, Iain Harkiss, an anonymous researcher, beist, hxr1 for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Bhaswanth Chigurupati, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Cem Onat Karagun, James Duffy (@0x4A616D657344), Lyutoon, N.M.Praveen Nawarathne (@zblockrat), Nebula Security (@nebusecurity), Nicolas Seriot, Peter Malone, Redon Gashi of Sentry, Robert Tran, Xiang Li from AOSP Lab @Nankai University, Yongsong Yu, an anonymous researcher for their assistance.\n\nEntry updated October 26, 2026\n\n### Mail\n\nWe would like to acknowledge Himanshu Bharti (@Xpl0itme) From Khatima for their assistance.\n\n### mDNSResponder\n\nWe would like to acknowledge Hannes Weissteiner, Roland Czerny, Simone Franza, Stefan Gast and Daniel Gruss of Graz University of Technology, and Johanna Ullrich of the Interdisciplinary Transformation University (IT:U), Issa Sancho, Jian Zhou, and Sindre Sorhus for their assistance.\n\nEntry updated October 19, 2026\n\n### Notifications\n\nWe would like to acknowledge Abhay Kailasia (@abhay_kailasia) from Safran Mumbai India, Himanshu Bharti @Xpl0itme From Khatima, Jan Rokita (rokita.me) for their assistance.\n\n### Passwords\n\nWe would like to acknowledge Catalin Lita of Moralis, Christian Kohlschütter, David Coomber of Info-Sec.CA, Lukasz Tulikowski at Software Cloud, Sujay Amin, an anonymous researcher for their assistance.\n\n### RemoteServiceDiscovery\n\nWe would like to acknowledge Tristan Madani (@TristanInSec) from Talence Security, an anonymous researcher for their assistance.\n\n### Security\n\nWe would like to acknowledge John Lussier, Masahiro Kawada (@kawakatz), Roman Zabicki for their assistance.\n\nWe would like to acknowledge Atul Kishor Jaiswal, Benjamin Hornbeck for their assistance.\n\n### Shortcuts\n\nWe would like to acknowledge Owen Pawling (@owenpawling) for their assistance.\n\n### VoiceOver\n\nWe would like to acknowledge Hariji Vivek Pandey for their assistance.\n\n### Wallet\n\nWe would like to acknowledge an anonymous researcher for their assistance.\n\n### WebKit\n\nWe would like to acknowledge @TristanInSec, Maher Azzouzi, Meridian Miftari, OpenAI Codex Security - Amy Burnett, ret2happy, wwwlk for their assistance.\n\n### WebKit Canvas\n\nWe would like to acknowledge Utkarsh Pal for their assistance.\n\n### Wi-Fi\n\nWe would like to acknowledge E Vestavik (@Dynasty) for their assistance.\n\nInformation about products not manufactured by Apple, or independent websites not controlled or tested by Apple, is provided without recommendation or endorsement. Apple assumes no responsibility with regard to the selection, performance, or use of third-party websites or products. Apple makes no representations regarding third-party website accuracy or reliability. Contact the vendor for additional information.\n\n Published Date: October 26, 2026","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27518,"url":"https://support.apple.com/en-us/149042","title":"Apple: About the security content of macOS Tahoe 26.7 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Tahoe 26.7 - Apple Support\n\n# About the security content of macOS Tahoe 26.7\n\nThis document describes the security content of macOS Tahoe 26.7.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Tahoe 26.7\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: macOS Tahoe\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accessibility\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious Software, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma (@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\n### Accounts\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### AMD\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to elevate privileges\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-28853: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: macOS Tahoe\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### App Store\n\nAvailable for: macOS Tahoe\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86888: Zhongcheng Li (CK01)\n\n### AppKit\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Lehan Dilusha Jayasingha (Sri Lanka), Jasminder Pal Singh, Dem0ns (@天府简易信工作室), Abdelhak Kherroubi\n\n### Apple Neural Engine\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65408: tamdao\n\n### AppleAVD\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleMobileFileIntegrity\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### ATS\n\nImpact: An app may be able to read files outside of its sandbox\n\nDescription: A permissions issue was addressed by removing the vulnerable code.\n\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\n### ATS\n\nImpact: An app may be able to access user-sensitive data\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Mohamad Dawoud / Abodi Dawoud, Ahmed Alwardani\n\n### AuthKit\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### autofs\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### Automator\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84535: Sindre Sorhus, Oren Yomtov, Morris Richman (@morrisinlife), Kun Peeks (@SwayZGl1tZyyy)\n\n### AVEVideoEncoder\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research\n\n### AVEVideoEncoder\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84613: jioundai\n\nEntry added October 19, 2026\n\n### cd9660\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, 정우 하 (@0xfa11babe), Suresh Sundaram, Surej Sekhar, Kun Peeks (@SwayZGl1tZyyy), Hari Shanmugam (The Hxr1), Ataberk Yavuzer\n\n### configd\n\nAvailable for: macOS Tahoe\n\nImpact: An app with admin privileges may be able to modify the System Keychain\n\nDescription: An authorization issue was addressed with improved entitlement checks.\n\nCVE-2026-86907: Roman Zabicki\n\nEntry added October 19, 2026\n\n### copyfile\n\nAvailable for: macOS Tahoe\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### Core Bluetooth\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### CoreDrag\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreMedia Video Toolbox\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\n### CoreML\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nImpact: An app may bypass Gatekeeper checks\n\nCVE-2026-28899: Kraken Cryptocurrency Exchange, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CoreServices\n\nImpact: A malicious application may be able to access restricted files\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreText\n\nImpact: Processing web content may lead to a denial-of-service\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreTypes\n\nImpact: A malicious app may be able to break out of its sandbox\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nCVE-2026-84511: stratan (@5tratan), Rahul Raj\n\n### CUPS\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nImpact: An app may be able to gain elevated privileges\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nCVE-2026-84554: Meshaal @ Darkcov, Joseph Shamoon\n\n### CUPS\n\nCVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, 章鱼哥@aipy （aipyaipy.com）, instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com\n\n### CUPS\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43691: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nImpact: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84516: 章鱼哥@aipy (aipyaipy.com）\n\n### CUPS\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nImpact: An application may be able to access restricted files\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-84541: 章鱼哥@aipy (aipyaipy.com)\n\n### DesktopServices\n\nAvailable for: macOS Tahoe\n\nImpact: Opening a file referencing a network share may lead to unexpected software execution\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84579: Thiago Mayllart\n\nEntry added October 19, 2026\n\n### DeviceCheck\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### Directory Utility\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to gain root privileges\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84505: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Hyunwoo Kim (@v4bel), flower xu, Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), Adriatik Raci\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: Processing a maliciously crafted disk image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84565: Nathaniel Oh (@calysteon)\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84550: Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-65362: Manish Bhatt, Amazon Leo Security, Nathaniel Oh (@calysteon), Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Adriatik Raci\n\n### Disk Images\n\nAvailable for: macOS Tahoe\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84512: Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### exFAT\n\nImpact: Mounting a maliciously crafted volume may lead to unexpected system termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84510: Richard Zana, Meta Red Team X - Nik Tsytsarkin\n\n### File Bookmark\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to modify a file it only had permission to read\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43785: Junyeong Lee (jylab.github.io), Merrick Hare, Narendra Singh (@_3P1C), John Nzyuko Uvyu, Aditya Kumar\n\n### file_cmds\n\nAvailable for: macOS Tahoe\n\nImpact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-84534: Geoffrey Lovelace\n\n### FontParser\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84524: an anonymous researcher\n\n### Foundation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Game Center\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-84618: Luke Symons\n\n### Graphics\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang\n\n### GPU Drivers\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86981: f00l (@PPPF00L) and 3ndy1 (@_3ndy1)\n\nEntry added October 19, 2026\n\n### Heimdal\n\nImpact: A user in a privileged network position may be able to leak sensitive user information\n\nCVE-2022-3437: Roman Zabicki\n\n### Heimdal\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-86868: Redon Gashi of Sentry\n\nEntry added October 19, 2026\n\n### HFS\n\nImpact: Mounting a malicious disk image may cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28934: Arni Hardarson (Neonix Security), Tristan Madani (@TristanInSec) from Talence Security, 정우 하, Aswin Kumar Gokulakannan, Peter Malone, Dun\n\n### HFS\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84581: Jonathan Bar Or (@yo_yo_yo_jbo), Feng Xue and XGPT of ThreatBook, Alfredo Pesoli (@__rev) of Bynar.io\n\n### Image Capture\n\nCVE-2026-64756: Luke Symons\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nCVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in memory corruption\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nCVE-2026-64759: Musaab Khan (@bxff), XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine, Guannan Wang, Zhanpeng Liu, Jiashuo Liang, Guancheng Li, Iain Harkiss, Daniel Febrero\n\nEntry added October 26, 2026\n\n### IOAcceleratorFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86944: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### IOGPUFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-43743: Lyutoon, Dun\n\n### IOKit\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영\n\n### Kernel\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84566: Bernhard Jackiewicz\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: Svetoslav Stolarov, Josh Maine of Calif.io, genter0, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: macOS Tahoe\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84549: Surya Narayan Kushwaha, Aswin Kumar Gokulakannan\n\n### Kernel\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84619: James Duffy (@0x4A616D657344), genter0, Eddy Tsalolikhin\n\n### Kernel\n\nAvailable for: macOS Tahoe\n\nImpact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43790: Omar Cerrito\n\n### Kernel\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Ye Zhang (@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: A malicious application may bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-65369: an anonymous researcher\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84544: Surya Narayan Kushwaha, Abhijeet Singh (www.linkedin.com/in/abhiunix/)\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may disclose kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43687: R4mbb of KRsecurity, Peter Malone\n\n### Kernel\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-86917: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nCVE-2026-43686: Peter Malone\n\n### Kernel\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84538: Stuart Thomas\n\n### Kernel\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nCVE-2026-65364: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65401: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-84530: Vladislav Shevchenko (Positive Technologies)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84521: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84517: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01\n\nEntry added October 19, 2026\n\n### Kernel\n\nEntry added October 26, 2026\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-84599: an anonymous researcher\n\nEntry added October 26, 2026\n\n### Kext Management\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-84514: Mohamed Wedatalla, Nathaniel Oh (@calysteon), Arjanit Isufi\n\n### Keychain Access\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-84556: Peter Malone, HvxyZLF, Chris Bailey - Short Circuit, Adrián Díaz Aguilar\n\n### LaunchServices\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-65382: an anonymous researcher\n\n### libxpc\n\nImpact: An app may be able to bypass sandbox restrictions\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-84577: Dave G. and Alex Radocea of supernetworks.org\n\n### Mail\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-84573: Dawuge of Shuffle Team\n\n### Mail\n\nAvailable for: macOS Tahoe\n\nImpact: An attacker in a privileged network position may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-43787: Armend Gashi\n\n### mDNSResponder\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive network connection information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-86914: Richard Zana\n\nEntry added October 19, 2026\n\n### Messages\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access protected user data\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-43741: Dawuge of Shuffle Team\n\n### Messages\n\nAvailable for: macOS Tahoe\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-86959: an anonymous researcher\n\nEntry added October 19, 2026\n\n### MobileAccessoryUpdater\n\nImpact: Connecting a malicious accessory may cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-86924: Matthew Zamat\n\n### Model I/O\n\nImpact: Opening a maliciously crafted file may lead to unexpected process termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84497: Yiğit Can YILMAZ (@yilmazcanyigit)\n\n### Multi-Touch\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65372: 이재영\n\nEntry added October 19, 2026\n\n### NetworkExtension\n\nImpact: An app may be able to identify what other apps a user has installed\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84626: Hoffcona of IES Red Team\n\nEntry updated October 19, 2026\n\n### NetworkExtension\n\nCVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\n### odproxyd\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-64712: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### quarantine\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84580: an anonymous researcher\n\n### quarantine\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84578: Kenneth Chew\n\n### QuartzCore\n\nCVE-2026-84576: Dora Orak, @Ethan Arbuckle, and @leptos_null\n\n### Quick Look\n\nImpact: Processing a maliciously crafted document may lead to an out-of-bounds read\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84548: Peter Malone\n\n### RealityKit\n\nImpact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n\nCVE-2026-84532: Franco Belman at Blackwing Intelligence, Hongsik Kim (mnur), stratan (@5tratan)\n\nEntry updated October 26, 2026\n\n### RealityKit\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-28966: stratan (@5tratan)\n\n### Reminders\n\nCVE-2026-65403: Rahul Raj\n\n### Sandbox\n\nCVE-2026-65392: Prathamesh Walunj, Csaba Fitzl (@theevilbit) of Iru, Ahmad Al Harrizuan Izadin\n\nEntry added October 26, 2026\n\n### SceneKit\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84487: stratan (@5tratan), Peter Malone, Dhiyanesh Selvaraj (@redroot97)\n\n### SceneKit\n\nCVE-2026-65413: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\nCVE-2026-84611: Nathaniel Oh (@calysteon)\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84632: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84620: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43697: an anonymous researcher, Peter Malone\n\nEntry updated October 26, 2026\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nCVE-2026-84526: stratan (@5tratan)\n\n### Screen Sharing Server\n\nCVE-2026-43760: Alfredo Pesoli (@__rev) of Bynar.io, wdszzml and Atuin Automated Vulnerability Discovery Engine\n\n### Screen Sharing Server\n\nImpact: An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-65400: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)\n\n### Security\n\nImpact: An attacker in a privileged network position may be able to intercept network traffic\n\nCVE-2026-86889: Jaeho Nam, Jungbum Lee, Sangwi Kang, Hyeonguk Ko and Taekyoung Kwon from SNU CSE MMLAB (mmlab.snu.ac.kr)\n\n### Security\n\nAvailable for: macOS Tahoe\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\nCVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak\n\n### Security\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access protected user data\n\nDescription: This issue was addressed with improved validation of the caller's access.\n\nCVE-2026-84508: Abodi Dawoud, Roelof van Dijk, Merrick Hare\n\nEntry added October 19, 2026\n\n### Siri\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An access issue was addressed with improved access controls.\n\nCVE-2026-65356: Ricardo Prado\n\nEntry added October 19, 2026\n\n### SMB\n\nAvailable for: macOS Tahoe\n\nImpact: Mounting a maliciously crafted SMB network share may lead to system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43719: Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds access issue was addressed with improved bounds checking.\n\nCVE-2026-84543: Peter Malone\n\n### SMB\n\nImpact: A local user may be able to read kernel memory\n\nDescription: A race condition was addressed with improved locking.\n\nCVE-2026-43690: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65376: 재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nDescription: An integer underflow was addressed with improved input validation.\n\nCVE-2026-84536: 재영 정, Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84537: Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: Connecting to a malicious SMB share may disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65365: Jay Patel, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to kernel memory corruption\n\nCVE-2026-84515: 재영 정, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84509: Dave G.\n\n### SMB\n\nImpact: An attacker with control of a network file server may be able to cause unexpected system termination\n\nCVE-2026-86871: John Lussier, Cem Onat Karagun, Ashish Kunwar\n\nEntry added October 19, 2026\n\n### smbx\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84553: Stuart Thomas\n\n### Software Update\n\nImpact: An app may be able to modify protected system files\n\nCVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team\n\n### SoftwareUpdate\n\nCVE-2026-65361: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova\n\n### Spotlight\n\nCVE-2026-65378: 杉山 壮太, AL Najafi, Richard Zana, Abodi Dawoud, Sindre Sorhus, 糖豆爸爸(@晴天组织), Niels Hofmans, Robert Mindo\n\nEntry updated October 26, 2026\n\n### Spotlight\n\nCVE-2026-84621: Abodi Dawoud, Ujjwal Reddy Kalvolu Sreenivasa Reddy, Johan Wahyudi, Armend Gashi\n\n### Storage\n\nCVE-2026-65345: 이재영, Seung Je Seong, Jakob Pammer, Ilya Andr (andrd3v) of Positive Technologies\n\n### Storage\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-65348: Jérôme Djouder\n\n### StorageKit\n\nCVE-2026-43791: Amy (amys.website), Meridian Miftari, Aaron Grattafiori - NVIDIA AI Red Team\n\n### Symptom Framework\n\nImpact: A malicious application may be able to determine a user's current location\n\nCVE-2026-84513: Sindre Sorhus\n\n### TCC\n\nCVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84572: Tomi (tk0) Koski (@tomikoski), Hari Shanmugam (The Hxr1)\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-84506: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: Connecting to a malicious WebDAV server may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-43677: Joseph Semaan, bubu, Omar Cerrito, HE WEI (ギカク), Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: Connecting to a malicious WebDAV server may result in code execution\n\nDescription: A memory corruption issue was addressed with improved validation.\n\nCVE-2026-65374: He Wei（ギカク), Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Wi-Fi\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86957: Niels Hofmans, Drin Raci of sentry.security\n\nEntry added October 19, 2026\n\n### WindowServer\n\nImpact: An app may be able to access sensitive user data\n\nDescription: The issue was addressed with improved handling of secure input state.\n\nCVE-2026-65379: Ricardo Prado\n\n### XPC\n\nAvailable for: macOS Tahoe\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84617: Stuart Wallace\n\n## Additional recognition\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### configd\n\nWe would like to acknowledge 九宫格 of Chongqing Telecom for their assistance.\n\nEntry added October 26, 2026\n\n### dcerpc\n\nWe would like to acknowledge Surya Narayan Kushwaha for their assistance.\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Nebula Security (@nebusecurity) for their assistance.\n\n### quarantine\n\nWe would like to acknowledge an anonymous researcher for their assistance.\n\n### Quick Look\n\nWe would like to acknowledge Peter Malone for their assistance.\n\n### rapportd\n\nWe would like to acknowledge Tae Woo Kim for their assistance.\n\n### Shortcuts\n\nWe would like to acknowledge Owen Pawling (@owenpawling) for their assistance.\n\n### Virtualization\n\nWe would like to acknowledge Ye Zhang (@VAR10CK) of Baidu Security for their assistance.\n\n### WindowServer\n\nWe would like to acknowledge Jex Amro for their assistance.\n\n### xar\n\nWe would like to acknowledge Matthew Dean for their assistance.\n\n Published Date: October 26, 2026","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"},{"id":27519,"url":"https://support.apple.com/en-us/149043","title":"Apple: About the security content of macOS Sequoia 15.8 - Apple Support","kind":"vendor","source":"nvd","publisher":"vendor","text":"About the security content of macOS Sequoia 15.8 - Apple Support\n\n# About the security content of macOS Sequoia 15.8\n\nThis document describes the security content of macOS Sequoia 15.8.\n\n## About Apple security updates\n\nFor our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security releases page.\n\nApple security documents reference vulnerabilities by CVE-ID when possible.\n\nFor more information about security, see the Apple Product Security page.\n\n## macOS Sequoia 15.8\n\nReleased September 14, 2026\n\n### Accelerate Framework\n\nAvailable for: macOS Sequoia\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86882: Peter Malone\n\n### Accessibility\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved data protection.\n\nCVE-2026-43664: Stuart Wallace, Rosyna Keller of Totally Not Malicious Software, Jian Lee (@speedyfriend433), Ilya Andr (andrd3v), Gongyu Ma (@Mezone0), David Strnadel, Daniel Febrero, CJ Vana, Asaf Cohen\n\n### Accounts\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-112446: Sindre Sorhus, LiangWei\n\nEntry added October 26, 2026\n\n### AMD\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to elevate privileges\n\nDescription: The issue was addressed with improved checks.\n\nCVE-2026-28853: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### APFS\n\nAvailable for: macOS Sequoia\n\nImpact: An application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-86910: an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84523: Cem Onat Karagun, an anonymous researcher\n\n### APFS\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-65396: Bhaswanth Chigurupati\n\nEntry added October 19, 2026\n\n### AppKit\n\nImpact: An app may be able to access protected user data\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84587: an anonymous researcher\n\n### Apple Account\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n\nDescription: An authentication issue was addressed with improved state management.\n\nCVE-2026-20683: Lehan Dilusha Jayasingha (Sri Lanka), Jasminder Pal Singh, Dem0ns (@天府简易信工作室), Abdelhak Kherroubi\n\n### Apple Neural Engine\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65408: tamdao\n\n### AppleAVD\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65407: Franco Belman at Blackwing Intelligence\n\n### AppleDouble\n\nImpact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84519: Richard Zana\n\n### AppleMobileFileIntegrity\n\nImpact: A malicious app may be able to break out of its sandbox\n\nDescription: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### ATS\n\nImpact: An app may be able to read files outside of its sandbox\n\nDescription: A permissions issue was addressed by removing the vulnerable code.\n\nCVE-2026-43763: Pavan Nallamothu, Jared Reyes\n\n### ATS\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: A logging issue was addressed with improved data redaction.\n\nCVE-2026-84525: D4rthL\n\n### ATS\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-65342: Mohamad Dawoud / Abodi Dawoud, Ahmed Alwardani\n\n### Audio\n\nImpact: An app may be able to leak sensitive user information\n\nCVE-2026-65339: Mustafa Calap (@ordinal0, dbg.re), Meta Red Team X - Nik Tsytsarkin\n\n### AuthKit\n\nImpact: A local app may be able to read a persistent account identifier\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-84583: Zhongcheng Li from IES Red Team\n\n### autofs\n\nImpact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n\nDescription: A path traversal issue was addressed with improved path validation.\n\nCVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology\n\n### autofs\n\nImpact: An app may be able to bypass Gatekeeper checks\n\nCVE-2026-84570: Mr.Gedik (@h4ck2s3c)\n\n### Automator\n\nImpact: An app may be able to break out of its sandbox\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84535: Sindre Sorhus, Oren Yomtov, Morris Richman (@morrisinlife), Kun Peeks (@SwayZGl1tZyyy)\n\n### AVEVideoEncoder\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-84616: Peter Malone\n\n### AVEVideoEncoder\n\nImpact: A sandboxed app may be able to execute arbitrary code with kernel privileges\n\nDescription: A race condition was addressed with improved state management.\n\nCVE-2026-84607: Ruslan Dautov\n\n### BackgroundAssets\n\nImpact: An app may be able to access sensitive user data\n\nCVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security\n\n### Bluetooth\n\nImpact: A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\n### Bluetooth\n\nImpact: An attacker in physical proximity may be able to corrupt process memory\n\nDescription: A memory corruption issue was addressed with improved input validation.\n\nCVE-2026-84547: Marc Newlin of SkySafe\n\nEntry added October 19, 2026\n\n### Bluetooth\n\nImpact: An attacker in radio range may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84613: jioundai\n\nEntry added October 19, 2026\n\n### cd9660\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, 정우 하 (@0xfa11babe), Suresh Sundaram, Surej Sekhar, Kun Peeks (@SwayZGl1tZyyy), Hari Shanmugam (The Hxr1), Ataberk Yavuzer\n\n### configd\n\nAvailable for: macOS Sequoia\n\nImpact: An app with admin privileges may be able to modify the System Keychain\n\nDescription: An authorization issue was addressed with improved entitlement checks.\n\nCVE-2026-86907: Roman Zabicki\n\nEntry added October 19, 2026\n\n### copyfile\n\nAvailable for: macOS Sequoia\n\nImpact: An archive may be able to bypass Gatekeeper\n\nDescription: A file quarantine bypass was addressed with additional checks.\n\nCVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher\n\n### Core Bluetooth\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access Bluetooth device information\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-86891: Dawuge of Shuffle Team\n\n### Core Bluetooth\n\nImpact: An attacker with a paired Bluetooth device may be able to execute arbitrary code\n\nDescription: A stack overflow was addressed with improved input validation.\n\nCVE-2026-86919: Mathis Mansière\n\nEntry added October 19, 2026\n\n### CoreDrag\n\nImpact: An app may be able to cause unexpected process termination or disclose process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43683: Nathaniel Oh (@calysteon)\n\n### CoreMedia\n\nImpact: An app may be able to access user-sensitive data\n\nDescription: An access issue was addressed with additional sandbox restrictions.\n\nCVE-2026-43789: 이재영\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-65344: Siyeong kim\n\n### CoreMedia\n\nImpact: A sandboxed process may be able to circumvent sandbox restrictions\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86876: Chris Bailey - Short Circuit\n\n### CoreMedia\n\nImpact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-86913: Meta Product Security\n\nEntry added October 19, 2026\n\n### CoreMedia Video Toolbox\n\nImpact: Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43702: Nathaniel Oh (@calysteon)\n\n### CoreML\n\nImpact: A sandboxed app may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved path validation.\n\nCVE-2026-84624: AL Najafi, tamdao\n\n### CoreMotion\n\nImpact: An app may be able to access motion data from headphones without user consent\n\nCVE-2026-43737: Stuart Wallace\n\n### CoreServices\n\nImpact: An app may be able to bypass Privacy preferences\n\nDescription: A permissions issue was addressed with improved state management.\n\nCVE-2026-84574: Mickey Jin (@patch1t)\n\n### CoreServices\n\nImpact: A malicious application may be able to access restricted files\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84559: Merrick Hare, Ryan Hughes\n\nEntry updated October 19, 2026\n\n### CoreServices\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)\n\nEntry updated October 19, 2026\n\n### CoreText\n\nImpact: Processing web content may lead to a denial-of-service\n\nCVE-2026-65412: Pavan Nallamothu\n\n### CoreTypes\n\nImpact: A malicious app may be able to break out of its sandbox\n\nCVE-2026-65381: Mickey Jin (@patch1t)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)\n\n### CoreUI\n\nImpact: Processing a maliciously crafted asset catalog may lead to unexpected process termination\n\nCVE-2026-84511: stratan (@5tratan), Rahul Raj\n\n### CUPS\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito\n\n### CUPS\n\nCVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, 章鱼哥@aipy （aipyaipy.com）, instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com\n\n### CUPS\n\nImpact: An attacker in a privileged network position may be able to cause a denial-of-service\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84554: Meshaal @ Darkcov, Joseph Shamoon\n\n### CUPS\n\nImpact: A remote user may cause an unexpected app termination or arbitrary code execution\n\nCVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: An app may be able to gain elevated privileges\n\nCVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team\n\n### CUPS\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-43691: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### CUPS\n\nImpact: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84516: 章鱼哥@aipy (aipyaipy.com）\n\n### CUPS\n\nImpact: An application may be able to access restricted files\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-84541: 章鱼哥@aipy (aipyaipy.com）\n\n### DesktopServices\n\nImpact: Opening a file referencing a network share may lead to unexpected software execution\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-84579: Thiago Mayllart\n\nEntry added October 19, 2026\n\n### DeviceCheck\n\nImpact: An app may be able to read persistent device identifiers\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)\n\n### Directory Utility\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to gain root privileges\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84505: Tommy DeVoss from Braze Security Team (@thedawgyg)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: Processing a maliciously crafted disk image may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84565: Nathaniel Oh (@calysteon)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), flower xu, Adriatik Raci, PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-84550: Hyunwoo Kim (@v4bel), Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to gain root privileges\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-65362: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Adriatik Raci, Manish Bhatt, Amazon Leo Security, Nathaniel Oh (@calysteon)\n\n### Disk Images\n\nAvailable for: macOS Sequoia\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84512: Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)\n\n### exFAT\n\nImpact: Mounting a maliciously crafted volume may lead to unexpected system termination\n\nDescription: A heap buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84510: Richard Zana, Meta Red Team X - Nik Tsytsarkin\n\n### File Bookmark\n\nImpact: An app may be able to modify a file it only had permission to read\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-43785: Junyeong Lee (jylab.github.io), Merrick Hare, Narendra Singh (@_3P1C), John Nzyuko Uvyu, Aditya Kumar\n\n### file_cmds\n\nImpact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n\nDescription: A path handling issue was addressed with improved validation.\n\nCVE-2026-84534: Geoffrey Lovelace\n\n### FontParser\n\nImpact: Processing a maliciously crafted font file may lead to unexpected app termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84524: an anonymous researcher\n\n### Foundation\n\nImpact: An app may be able to cause a denial of service\n\nDescription: A type confusion issue was addressed with improved memory handling.\n\nCVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### Game Center\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A permissions issue was addressed with improved validation.\n\nCVE-2026-84618: Luke Symons\n\n### GPU Drivers\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86981: f00l (@PPPF00L) and 3ndy1 (@_3ndy1)\n\nEntry added October 19, 2026\n\n### Graphics\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang\n\n### Heimdal\n\nImpact: A user in a privileged network position may be able to leak sensitive user information\n\nCVE-2022-3437: Roman Zabicki\n\n### Heimdal\n\nCVE-2026-86868: Redon Gashi of Sentry\n\nEntry added October 19, 2026\n\n### HFS\n\nImpact: Mounting a malicious disk image may cause unexpected system termination\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-28934: Arni Hardarson (Neonix Security), Tristan Madani (@TristanInSec) from Talence Security, 정우 하, Aswin Kumar Gokulakannan, Peter Malone, Dun\n\n### HFS\n\nImpact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84581: Jonathan Bar Or (@yo_yo_yo_jbo), Feng Xue and XGPT of ThreatBook, Alfredo Pesoli (@__rev) of Bynar.io\n\n### Image Capture\n\nCVE-2026-64756: Luke Symons\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in disclosure of process memory\n\nDescription: An uninitialized memory issue was addressed with improved memory initialization.\n\nCVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com\n\nEntry updated October 19, 2026\n\n### ImageIO\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nDescription: The issue was addressed with improved bounds checks.\n\nCVE-2026-64758: 진규정 (Gyujeong Jin, @G1uN4sh)\n\n### ImageIO\n\nImpact: Processing an image may lead to arbitrary code execution\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-65346: Meta Red Team X - Nik Tsytsarkin\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may result in memory corruption\n\nCVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to arbitrary code execution\n\nCVE-2026-64759: Musaab Khan (@bxff), XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine, Guannan Wang, Zhanpeng Liu, Jiashuo Liang, Guancheng Li, Iain Harkiss, Daniel Febrero\n\nEntry added October 26, 2026\n\n### ImageIO\n\nImpact: Processing a maliciously crafted image may lead to heap corruption\n\nDescription: A buffer overflow was addressed with improved bounds checking.\n\nCVE-2026-84627: Piotr Jerzy Duszynski, Mateusz Jurczyk of Google Project Zero, ธนกฤต ทัฬหะ, Rahul Raj, PETOWORKS의 Bugeun Choi (@Bugeun), f0r of MurphySec\n\nEntry added October 26, 2026\n\n### IOAcceleratorFamily\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-86944: f00l (@PPPF00L) and 3ndy1(@_3ndy1)\n\nEntry added October 19, 2026\n\n### IOKit\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영\n\n### IOMobileFrameBuffer\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-64736: Ruslan Dautov, hxr1\n\n### Kernel\n\nImpact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84566: Bernhard Jackiewicz\n\n### Kernel\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-28968: Svetoslav Stolarov, Josh Maine of Calif.io, genter0, Dun\n\nEntry updated October 19, 2026\n\n### Kernel\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to cause unexpected system termination or write kernel memory\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84619: James Duffy (@0x4A616D657344), genter0, Eddy Tsalolikhin\n\n### Kernel\n\nAvailable for: macOS Sequoia\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84549: Surya Narayan Kushwaha, Aswin Kumar Gokulakannan\n\n### Kernel\n\nImpact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-43790: Omar Cerrito\n\n### Kernel\n\nImpact: An app with root privileges may be able to read uninitialized kernel memory\n\nDescription: A memory initialization issue was addressed with improved memory handling.\n\nCVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A memory corruption issue was addressed with improved memory handling.\n\nCVE-2026-65377: Ye Zhang (@VAR10CK) of Baidu Security, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: A malicious application may bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-65369: an anonymous researcher\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84544: Surya Narayan Kushwaha, Abhijeet Singh (www.linkedin.com/in/abhiunix/)\n\n### Kernel\n\nImpact: An app may be able to gain root privileges\n\nDescription: A permissions issue was addressed with additional restrictions.\n\nCVE-2026-86917: Hiroki Imai (LAC Co., Ltd.)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-43684: Peter Malone\n\n### Kernel\n\nImpact: Connecting to a malicious NFS server may lead to kernel memory corruption\n\nCVE-2026-43686: Peter Malone\n\n### Kernel\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84538: Stuart Thomas\n\n### Kernel\n\nImpact: A remote attacker may be able to cause unexpected system termination\n\nCVE-2026-65364: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security\n\nCVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nCVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved input validation.\n\nCVE-2026-65349: an anonymous researcher\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-65330: Ashish Kunwar, Mikhail Lozhnikov of Positive Technologies, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\nCVE-2026-28935: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84599: an anonymous researcher\n\nEntry updated October 26, 2026\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nCVE-2026-84521: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A race condition was addressed with improved state handling.\n\nCVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84517: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati\n\n### Kernel\n\nImpact: A local user may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Kernel\n\nCVE-2026-65371: Vladislav Shevchenko (Positive Technologies)\n\n### Kernel\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: A double free issue was addressed with improved memory management.\n\nCVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01\n\nEntry added October 19, 2026\n\n### Kernel\n\nEntry added October 26, 2026\n\n### Kernel\n\nCVE-2026-86916: Wang Yu\n\nEntry added October 26, 2026\n\n### Kext Management\n\nImpact: An app may be able to modify protected parts of the file system\n\nDescription: This issue was addressed with additional entitlement checks.\n\nCVE-2026-84514: Mohamed Wedatalla, Nathaniel Oh (@calysteon), Arjanit Isufi\n\n### Keychain Access\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved access control.\n\nCVE-2026-84556: Peter Malone, HvxyZLF, Chris Bailey - Short Circuit, Adrián Díaz Aguilar\n\n### LaunchServices\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: A parsing issue in the handling of directory paths was addressed with improved path validation.\n\nCVE-2026-65382: an anonymous researcher\n\n### Mail\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: This issue was addressed with improved checks.\n\nCVE-2026-84573: Dawuge of Shuffle Team\n\n### Mail\n\nAvailable for: macOS Sequoia\n\nImpact: An attacker in a privileged network position may be able to leak sensitive user information\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-43787: Armend Gashi\n\n### mDNSResponder\n\nImpact: An app may be able to access sensitive network connection information\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-86914: Richard Zana\n\nEntry added October 19, 2026\n\n### Messages\n\nImpact: An app may be able to access protected user data\n\nDescription: A logic issue was addressed with improved state management.\n\nCVE-2026-43741: Dawuge of Shuffle Team\n\n### Messages\n\nImpact: Processing a maliciously crafted image may lead to unexpected process termination\n\nDescription: An input validation issue was addressed with improved input validation.\n\nCVE-2026-86959: an anonymous researcher\n\nEntry added October 19, 2026\n\n### Model I/O\n\nImpact: Opening a maliciously crafted file may lead to unexpected process termination\n\nDescription: A buffer overflow was addressed with improved size validation.\n\nCVE-2026-84497: Yiğit Can YILMAZ (@yilmazcanyigit)\n\n### Multi-Touch\n\nImpact: A malicious application may be able to bypass Privacy preferences\n\nDescription: A race condition was addressed with additional validation.\n\nCVE-2026-65372: 이재영\n\nEntry added October 19, 2026\n\n### NetworkExtension\n\nImpact: An app may be able to identify what other apps a user has installed\n\nDescription: An information disclosure issue was addressed with improved state management.\n\nCVE-2026-84626: Hoffcona of IES Red Team\n\nEntry updated October 19, 2026\n\n### NetworkExtension\n\nCVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos\n\n### odproxyd\n\nImpact: An app may be able to gain root privileges\n\nCVE-2026-64712: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### quarantine\n\nCVE-2026-84580: an anonymous researcher\n\n### quarantine\n\nImpact: An app may be able to break out of its sandbox\n\nCVE-2026-84578: Kenneth Chew\n\n### QuartzCore\n\nCVE-2026-84576: Dora Orak, @Ethan Arbuckle, and @leptos_null\n\n### Quick Look\n\nImpact: Processing a maliciously crafted document may lead to an out-of-bounds read\n\nDescription: An integer overflow was addressed with improved input validation.\n\nCVE-2026-84548: Peter Malone\n\n### RealityKit\n\nImpact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n\nCVE-2026-84532: Franco Belman at Blackwing Intelligence, Hongsik Kim (mnur), stratan (@5tratan)\n\nEntry updated October 26, 2026\n\n### RealityKit\n\nImpact: Processing a maliciously crafted file may lead to unexpected app termination\n\nCVE-2026-28966: stratan (@5tratan)\n\n### Reminders\n\nCVE-2026-65403: Rahul Raj\n\n### Sandbox\n\nCVE-2026-84555: Liu Xue & 九宫格 of Chongqing Telecom\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84632: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted file may result in disclosure of process memory\n\nCVE-2026-84487: stratan (@5tratan), Peter Malone, Dhiyanesh Selvaraj (@redroot97)\n\n### SceneKit\n\nCVE-2026-65413: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84620: Peter Malone\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D model may lead to memory corruption\n\nCVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone\n\nCVE-2026-84611: Nathaniel Oh (@calysteon)\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-43697: an anonymous researcher, Peter Malone\n\nEntry updated October 26, 2026\n\n### SceneKit\n\nImpact: Processing a maliciously crafted 3D scene may lead to unexpected process termination\n\nDescription: An out-of-bounds write issue was addressed with improved bounds checking.\n\nCVE-2026-84526: stratan (@5tratan)\n\n### Security\n\nImpact: An attacker in a privileged network position may be able to intercept network traffic\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\nCVE-2026-86889: Jaeho Nam, Jungbum Lee, Sangwi Kang, Hyeonguk Ko and Taekyoung Kwon from SNU CSE MMLAB (mmlab.snu.ac.kr)\n\n### Security\n\nImpact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n\nDescription: A certificate validation issue was addressed with improved certificate validation.\n\nCVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: A shortcut may be able to access sensitive user data without permission\n\nDescription: A permissions issue was addressed with improved state management.\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: A shortcut may be able to access sensitive user data without permission\n\nDescription: A privacy issue was addressed with improved state management.\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: A shortcut may be able to transmit data before user authorization is granted\n\nDescription: An authorization issue was addressed with improved state management.\n\n### Shortcuts\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management\n\nCVE-2026-28850: OSORI\n\nEntry added October 26, 2026\n\n### Siri\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An access issue was addressed with improved access controls.\n\nCVE-2026-65356: Ricardo Prado\n\nEntry added October 19, 2026\n\n### SMB\n\nImpact: Mounting a maliciously crafted SMB network share may lead to system termination\n\nDescription: A use-after-free issue was addressed with improved memory management.\n\nCVE-2026-43719: Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: A local user may be able to read kernel memory\n\nDescription: A race condition was addressed with improved locking.\n\nCVE-2026-43690: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65376: 재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n\nCVE-2026-84543: Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nDescription: An integer underflow was addressed with improved input validation.\n\nCVE-2026-84536: 재영 정, Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: The issue was addressed with improved memory handling.\n\nCVE-2026-84537: Peter Malone, Feng Xue and XGPT of ThreatBook\n\n### SMB\n\nImpact: Connecting to a malicious SMB share may disclose kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-65365: Jay Patel, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to kernel memory corruption\n\nCVE-2026-84515: 재영 정, Peter Malone\n\n### SMB\n\nImpact: Connecting to a malicious SMB server may lead to unexpected system termination\n\nCVE-2026-84509: Dave G.\n\n### SMB\n\nImpact: An attacker with control of a network file server may be able to cause unexpected system termination\n\nCVE-2026-86871: John Lussier, Cem Onat Karagun, Ashish Kunwar\n\nEntry added October 19, 2026\n\n### smbx\n\nImpact: A remote attacker may be able to cause a denial-of-service\n\nCVE-2026-84553: Stuart Thomas\n\n### Software Update\n\nCVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team\n\n### SoftwareUpdate\n\nCVE-2026-65361: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova\n\n### Spotlight\n\nCVE-2026-28930: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\n### Spotlight\n\nCVE-2026-65378: 杉山 壮太, AL Najafi, Richard Zana, Abodi Dawoud, Sindre Sorhus, 糖豆爸爸(@晴天组织), Niels Hofmans, Robert Mindo\n\nEntry updated October 26, 2026\n\n### Spotlight\n\nCVE-2026-84621: Abodi Dawoud, Ujjwal Reddy Kalvolu Sreenivasa Reddy, Johan Wahyudi, Armend Gashi\n\n### Storage\n\nCVE-2026-65345: 이재영, Seung Je Seong, Jakob Pammer, Ilya Andr (andrd3v) of Positive Technologies\n\n### Storage\n\nImpact: An app may be able to modify protected parts of the file system\n\nCVE-2026-65348: Jérôme Djouder\n\n### StorageKit\n\nCVE-2026-43791: Amy (amys.website), Meridian Miftari, Aaron Grattafiori - NVIDIA AI Red Team\n\n### Symptom Framework\n\nImpact: A malicious application may be able to determine a user's current location\n\nCVE-2026-84513: Sindre Sorhus\n\n### TCC\n\nCVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or read kernel memory\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-84572: Tomi (tk0) Koski (@tomikoski), Hari Shanmugam (The Hxr1)\n\n### udf\n\nImpact: An app may be able to cause unexpected system termination or corrupt kernel memory\n\nDescription: A use after free issue was addressed with improved memory management.\n\nCVE-2026-84506: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: Connecting to a malicious WebDAV server may lead to unexpected app termination\n\nDescription: An out-of-bounds write issue was addressed by removing the vulnerable code.\n\nCVE-2026-43677: Joseph Semaan, bubu, Omar Cerrito, HE WEI (ギカク), Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\nEntry updated October 19, 2026\n\n### WebDAV\n\nImpact: An app may be able to cause unexpected system termination\n\nDescription: The issue was addressed with improved authentication.\n\nCVE-2026-65375: YingMuo (@YingMuo) of DEVCORE Research Team, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### WebDAV\n\nAvailable for: macOS Sequoia\n\nImpact: Connecting to a malicious WebDAV server may result in code execution\n\nDescription: A memory corruption issue was addressed with improved validation.\n\nCVE-2026-65374: HE WEI（ギカク）, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research\n\n### WebDAV\n\nAvailable for: macOS Sequoia\n\nImpact: An app may bypass Gatekeeper checks\n\nDescription: A logic issue was addressed with improved checks.\n\nCVE-2026-28899: Kraken Cryptocurrency Exchange, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs\n\n### Wi-Fi\n\nAvailable for: macOS Sequoia\n\nImpact: An attacker in wireless proximity may be able to cause unexpected system termination\n\nDescription: An out-of-bounds read was addressed with improved bounds checking.\n\nCVE-2026-86957: Niels Hofmans, Drin Raci of sentry.security\n\nEntry added October 19, 2026\n\n### WindowServer\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: The issue was addressed with improved handling of secure input state.\n\nCVE-2026-65379: Ricardo Prado\n\nEntry added October 19, 2026\n\n### XPC\n\nAvailable for: macOS Sequoia\n\nImpact: An app may be able to access sensitive user data\n\nDescription: An authorization issue was addressed with improved state management.\n\nCVE-2026-84617: Stuart Wallace\n\n## Additional recognition\n\n### AVEVideoEncoder\n\nWe would like to acknowledge tamdao for their assistance.\n\n### Bluetooth\n\nWe would like to acknowledge Suresh Sundaram for their assistance.\n\n### Calendar\n\nWe would like to acknowledge Dany Assuid, Jacob Hazak from Zero-Defense Labs, Varik Matevosyan, stratan (@5tratan) for their assistance.\n\n### Compression\n\nWe would like to acknowledge Tommy DeVoss from Braze Security Team (@thedawgyg) for their assistance.\n\n### CUPS\n\nWe would like to acknowledge Aaron Grattafiori - NVIDIA AI Red Team for their assistance.\n\n### dcerpc\n\nWe would like to acknowledge Surya Narayan Kushwaha for their assistance.\n\n### ImageIO\n\nWe would like to acknowledge Kun Peeks (@SwayZGl1tZyyy) and songbird for their assistance.\n\nEntry updated October 19, 2026\n\n### Kernel\n\nWe would like to acknowledge Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Yongsong Yu for their assistance.\n\nEntry updat","published_at":null,"relation":"advisory","confidence":null,"note":"Vendor advisory: support.apple.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}