Apple Security Releases149035

macOS Golden Gate 27

Severity not listed 274 CVEs Published Sep 14, 2026 at 12:00 AM UTC

Summary

No separate summary was provided in the collected bulletin.

View 267 component changes

Accelerate Framework

Available for: MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)

Impact: Processing a maliciously crafted image may lead to unexpected process termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86882: Peter Malone

Accelerate Framework

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86918: Arni Hardarson (Neonix Security)

Accessibility

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved data protection.

CVE-2026-43664: Stuart Wallace, Ilya Andr (andrd3v), Rosyna Keller of Totally Not Malicious Software, CJ Vana, David Strnadel, Daniel Febrero, Asaf Cohen, Gongyu Ma (@Mezone0), Jian Lee (@speedyfriend433)

Accounts

Impact: A malicious application may be able to bypass Privacy preferences

Description: An authorization issue was addressed with improved state management.

CVE-2026-65404: Arni Hardarson (Neonix Security), Vinay Kumar Rasala (Xplo8E) from Appknox, Stuart Wallace, 이재영

Accounts

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with additional entitlement checks.

CVE-2026-112446: Sindre Sorhus, LiangWei

afpfs

Impact: An app may be able to disclose kernel memory

Description: This issue was addressed by removing the vulnerable code.

CVE-2026-86940: Dave G.

APFS

Impact: An application may be able to access restricted files

Description: A permissions issue was addressed with improved path validation.

CVE-2026-86910: an anonymous researcher

APFS

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84523: Cem Onat Karagun, an anonymous researcher

APFS

Impact: An app may be able to cause unexpected system termination

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-65396: Bhaswanth Chigurupati

App Intents

Impact: An app may be able to access sensitive user data

Description: A privacy issue was addressed with improved access restrictions.

CVE-2026-84582: Zhongcheng Li (CK01)

App Store

Impact: A local app may be able to read a persistent account identifier

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86888: Zhongcheng Li (CK01)

AppKit

Impact: An app may be able to access protected user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-84587: an anonymous researcher

Apple Account

Impact: A malicious application may be able to leak sensitive user information

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-84586: Prashan Samarathunge, Zhongcheng Li (CK01)

Apple Account

Impact: An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account

Description: An authentication issue was addressed with improved state management.

CVE-2026-20683: Dem0ns (@天府简易信工作室), Abdelhak Kherroubi, Jasminder Pal Singh, Lehan Dilusha Jayasingha (Sri Lanka)

Apple Intelligence

Impact: An app may be able to bypass Apple Intelligence security prompts

Description: A permissions issue was addressed with improved state management.

CVE-2026-84601: Nick Cook, Sentry Flag

Apple Intelligence

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-86920: Johan Wahyudi

Apple Neural Engine

Impact: An app may be able to cause unexpected system termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-65408: tamdao

Apple Neural Engine

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: A race condition was addressed with additional validation.

CVE-2026-84634: S. Rosario

Apple Neural Engine

Impact: An app may be able to break out of its sandbox

Description: A path traversal issue was addressed with improved path validation.

CVE-2026-84633: Tristan Madani (@TristanInSec) from Talence Security, Niels Hofmans

Apple Neural Engine

Impact: A malicious app may be able to delete files for which it does not have privileges

Description: A path traversal issue was addressed with improved path validation.

CVE-2026-86877: Hyunwoo Kim (@v4bel)

Apple Neural Engine

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84595: tamdao

AppleAVD

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-65407: Franco Belman at Blackwing Intelligence

AppleDouble

Impact: Mounting a disk image with maliciously crafted files may lead to unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84519: Richard Zana

AppleFDEKeyStore

Impact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-84520: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

AppleMobileFileIntegrity

Impact: A malicious app may be able to break out of its sandbox

Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement.

CVE-2026-65381: Mickey Jin (@patch1t)

Archive Utility

Impact: An app may be able to break out of its sandbox

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-84584: Mickey Jin (@patch1t)

Archive Utility

Impact: An app may be able to access sensitive user data

Description: A race condition was addressed with improved state management.

CVE-2026-84522: Mickey Jin (@patch1t)

ATS

Impact: An app may be able to access user-sensitive data

Description: A logging issue was addressed with improved data redaction.

CVE-2026-84525: D4rthL

ATS

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with improved validation.

CVE-2026-65342: Ahmed Alwardani, Mohamad Dawoud / Abodi Dawoud

Authentication Services

Impact: An app may be able to delete credentials stored in Keychain

Description: This issue was addressed by removing the vulnerable code.

CVE-2026-86905: Ilya Andr (andrd3v)

AuthKit

Impact: A local app may be able to read a persistent account identifier

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-84583: Zhongcheng Li from IES Red Team

autofs

Impact: An app may be able to bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-84570: Mr.Gedik (@h4ck2s3c)

autofs

Impact: An attacker with control of a network directory server may be able to execute arbitrary code with root privileges

Description: A path traversal issue was addressed with improved path validation.

CVE-2026-84568: Mr.Gedik (@h4ck2s3c) of Turkish Technology

Automator

Impact: An app may be able to break out of its sandbox

Description: An authorization issue was addressed with improved state management.

CVE-2026-84535: Kun Peeks (@SwayZGl1tZyyy), Oren Yomtov, Morris Richman (@morrisinlife), Sindre Sorhus

AVEVideoEncoder

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved checks.

CVE-2026-65410: Calif.io in collaboration with Claude and Anthropic Research

AVEVideoEncoder

Impact: An app may be able to cause unexpected system termination

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-84616: Peter Malone

AVEVideoEncoder

Impact: A sandboxed app may be able to execute arbitrary code with kernel privileges

Description: A race condition was addressed with improved state management.

CVE-2026-84607: Ruslan Dautov

BackgroundAssets

Impact: An app may be able to access sensitive user data

Description: A logic issue was addressed with improved validation.

CVE-2026-65406: Ye Zhang (@VAR10CK) of Baidu Security

Bluetooth

Impact: An app may gain unauthorized access to Bluetooth

Description: An authorization issue was addressed with improved state management.

CVE-2026-84560: an anonymous researcher

Bluetooth

Impact: An app may be able to gain root privileges

Description: This issue was addressed with additional entitlement checks.

CVE-2026-84631: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Bluetooth

Impact: An attacker in physical proximity may be able to corrupt process memory

Description: A memory corruption issue was addressed with improved input validation.

CVE-2026-84547: Marc Newlin of SkySafe

Bluetooth

Impact: An attacker in radio range may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84613: jioundai

BOM

Impact: A maliciously crafted ZIP archive may bypass Gatekeeper checks

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-84610: Murray Mike, Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Carbon Core

Impact: An app may be able to access sensitive user data

Description: A logging issue was addressed with improved data redaction.

CVE-2026-84528: zenith

cd9660

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-84567: Sanny Mitra, Sihyun Roh (Compsec, SNU), ngockhanh from Cystack, Ataberk Yavuzer, 정우 하 (@0xfa11babe), Kun Peeks (@SwayZGl1tZyyy), Surej Sekhar, Suresh Sundaram, Hari Shanmugam (The Hxr1)

copyfile

Impact: An archive may be able to bypass Gatekeeper

Description: A file quarantine bypass was addressed with additional checks.

CVE-2026-65399: Rishabh Jain (rjcyber) of cyberplanet, Pasquale Scola, an anonymous researcher

copyfile

Impact: An app may be able to modify protected parts of the file system

Description: This issue was addressed with improved handling of symlinks.

CVE-2026-86966: Jihwan Yoon

Core Bluetooth

Impact: An app may be able to access Bluetooth device information

Description: An authorization issue was addressed with improved state management.

CVE-2026-86891: Dawuge of Shuffle Team

Core Bluetooth

Impact: An attacker with a paired Bluetooth device may be able to execute arbitrary code

Description: A stack overflow was addressed with improved input validation.

CVE-2026-86919: Mathis Mansière

Core Bluetooth

Impact: Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-112608: Duc Anh Nguyen & Ta Duc Thien

CoreDrag

Impact: An app may be able to cause unexpected process termination or disclose process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43683: Nathaniel Oh (@calysteon)

CoreMedia

Impact: An app may be able to access user-sensitive data

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-43789: 이재영

CoreMedia

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: A memory corruption issue was addressed by removing the vulnerable code.

CVE-2026-64752: Nik Tsytsarkin

CoreMedia

Impact: A sandboxed process may be able to circumvent sandbox restrictions

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86876: Chris Bailey - Short Circuit

CoreMedia

Impact: Processing a maliciously crafted video file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-65344: Siyeong kim

CoreMedia

Impact: Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-86913: Meta Product Security

CoreML

Impact: A sandboxed app may be able to access restricted files

Description: A permissions issue was addressed with improved path validation.

CVE-2026-84624: AL Najafi, tamdao

CoreMotion

Impact: An app may be able to access motion data from headphones without user consent

Description: An authorization issue was addressed with improved validation.

CVE-2026-43737: Stuart Wallace

CoreServices

Impact: An app may be able to bypass Privacy preferences

Description: A permissions issue was addressed with improved state management.

CVE-2026-84574: Mickey Jin (@patch1t)

CoreServices

Impact: A malicious application may be able to access restricted files

Description: A permissions issue was addressed with improved validation.

CVE-2026-84559: Merrick Hare, Ryan Hughes

CoreServices

Impact: An app may be able to gain root privileges

Description: This issue was addressed with additional entitlement checks.

CVE-2026-43786: Richard Zana, Kujtim Kryeziu (Sentry)

CoreServicesUIAgent

Impact: A maliciously crafted disk image may bypass Gatekeeper checks

Description: A logic issue was addressed with improved validation.

CVE-2026-65368: an anonymous researcher

CoreText

Impact: Processing web content may lead to a denial-of-service

Description: A null pointer dereference was addressed with improved input validation.

CVE-2026-65412: Pavan Nallamothu

CoreText

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84596: ret2happy, Meta Product Security

CoreUI

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84575: Mustafa Calap (@ordinal0, dbg.re)

CoreUI

Impact: An app may be able to cause a denial of service

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84489: stratan (@5tratan), Peter Malone

CoreUI

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84571: stratan (@5tratan), Peter Malone

CoreUI

Impact: Processing a maliciously crafted asset catalog may result in disclosure of process memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43738: Peter Malone

CoreUI

Impact: Processing a maliciously crafted asset catalog may lead to unexpected process termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84511: Rahul Raj, stratan (@5tratan)

CUPS

Impact: An app may be able to cause unexpected system termination

Description: A logic issue was addressed with improved checks.

CVE-2026-84563: Yongyue WANG AKA Brian.W of OKX security, Omar Cerrito

CUPS

Impact: An attacker in a privileged network position may be able to cause a denial-of-service

Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

CVE-2026-34979: Tristan Madani (@TristanInSec) from Talence Security, Юлия Мерцалова

CUPS

Impact: An app may be able to gain root privileges

Description: An injection issue was addressed with improved validation.

CVE-2026-43698: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

CUPS

Impact: An app may be able to gain elevated privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-64790: Aaron Grattafiori - NVIDIA AI Red Team

CUPS

Impact: A remote user may cause an unexpected app termination or arbitrary code execution

Description: A validation issue was addressed with improved input sanitization.

CVE-2026-43692: Aaron Grattafiori - NVIDIA AI Red Team

CUPS

Impact: An attacker in a privileged network position may be able to cause a denial-of-service

Description: An integer overflow was addressed with improved input validation.

CVE-2026-84554: Joseph Shamoon, Meshaal @ Darkcov

CUPS

Impact: An app may be able to gain root privileges

Description: A path handling issue was addressed with improved validation.

CVE-2026-43691: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

CUPS

Impact: An application may be able to access restricted files

Description: An input validation issue was addressed with improved input validation.

CVE-2026-84541: 章鱼哥@aipy (aipyaipy.com）

CUPS

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-84540: Yongyue WANG AKA Brian.W of OKX security, 章鱼哥@aipy （aipyaipy.com）, instantraaamen (github.com/instantraaamen) Contact: masa.shiramizu@gmail.com

CUPS

Impact: Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84516: 章鱼哥@aipy (aipyaipy.com)

CUPS

Impact: An app with App Sandbox restrictions may be able to escape the sandbox and execute code with root privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-84545: Jurre van Bergen - Threatnotify, Redon Gashi (Sentry), 章鱼哥@aipy (aipyaipy.com), Mathis Mansière

DesktopServices

Impact: Opening a file referencing a network share may lead to unexpected software execution

Description: A logic issue was addressed with improved checks.

CVE-2026-84579: Thiago Mayllart

DeviceCheck

Impact: An app may be able to read persistent device identifiers

Description: An authorization issue was addressed with improved access control.

CVE-2026-84612: N.M.Praveen Nawarathne (@zblockrat), James Gill (@jjtech@infosec.exchange)

Directory Utility

Impact: An app may be able to gain root privileges

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84505: Tommy DeVoss from Braze Security Team (@thedawgyg)

Disk Images

Impact: Processing a maliciously crafted disk image may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84565: Nathaniel Oh (@calysteon)

Disk Images

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved memory handling.

CVE-2026-84552: Tommy DeVoss from Braze Security Team (@thedawgyg), flower xu, Adriatik Raci, PETOWORKS의 Bugeun Choi (@Bugeun), Peter Malone, Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), Hyunwoo Kim (@v4bel)

Disk Images

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with additional validation.

CVE-2026-84550: Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research), Hyunwoo Kim (@v4bel)

Disk Images

Impact: An app may be able to gain root privileges

Description: This issue was addressed with improved checks.

CVE-2026-65362: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Adriatik Raci, Manish Bhatt, Amazon Leo Security, Nathaniel Oh (@calysteon)

Disk Images

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84512: Daisuke Hatakeyama and Ryohei Ueki (@SYZD Research)

dyld

Impact: An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code

Description: The issue was addressed with improved memory handling.

CVE-2026-86958: oxsignal

exFAT

Impact: Mounting a maliciously crafted volume may lead to unexpected system termination

Description: A heap buffer overflow was addressed with improved bounds checking.

CVE-2026-84510: Meta Red Team X - Nik Tsytsarkin, Richard Zana

exFAT

Impact: Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86901: an anonymous researcher

exFAT

Impact: Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure

Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2026-86900: ngockhanh from Cystack, an anonymous researcher

File Bookmark

Impact: An app may be able to modify a file it only had permission to read

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-43785: Junyeong Lee (jylab.github.io), Merrick Hare, Aditya Kumar, John Nzyuko Uvyu, Narendra Singh (@_3P1C)

file_cmds

Impact: Extracting a maliciously crafted archive may allow an attacker to write arbitrary files

Description: A path handling issue was addressed with improved validation.

CVE-2026-84534: Geoffrey Lovelace

Filters

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: A memory corruption issue was addressed with improved input validation.

CVE-2026-43688: Peter Malone

FontParser

Impact: Processing a maliciously crafted font file may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84524: an anonymous researcher

FontParser

Impact: Processing a maliciously crafted font may result in the disclosure of process memory

Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2026-84597: Nik Tsytsarkin

Foundation

Impact: An app may be able to access sensitive user data

Description: An access issue was addressed with additional sandbox restrictions on the system pasteboards.

CVE-2026-84569: Yurii Bakurov, Sindre Sorhus, Asaf Cohen

Foundation

Impact: An app may be able to cause a denial of service

Description: A type confusion issue was addressed with improved memory handling.

CVE-2026-65409: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

Foundation

Impact: A malicious app may be able to bypass clickjacking protections for secure prompts

Description: This issue was addressed with improved state management.

CVE-2026-86911: Ron Masas of BreakPoint.SH, an anonymous researcher

Foundation

Impact: A malicious app may be able to break out of its sandbox

Description: A race condition was addressed with additional validation.

CVE-2026-86961: an anonymous researcher

Game Center

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with improved validation.

CVE-2026-84618: Luke Symons

GPU Drivers

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84539: Ye Zhang (@VAR10CK) of Baidu Security

GPUTools

Impact: An app may be able to access protected user data

Description: A path handling issue was addressed with improved validation.

CVE-2026-86928: Andrey Chernykh

Grapher

Impact: Processing a maliciously crafted file may lead to arbitrary code execution

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86929: Anand (anandsreekumar.com)

Graphics

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with improved state handling.

CVE-2026-84492: Tommy DeVoss from Braze Security Team (@thedawgyg), Jiyong Yang

Heimdal

Impact: An attacker in a privileged network position may be able to modify network traffic

Description: A cryptographic issue was addressed with improved integrity checks.

CVE-2026-84533: Vishal Patidar, Roman Zabicki

Heimdal

Impact: A user in a privileged network position may be able to leak sensitive user information

Description: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

CVE-2022-3437: Roman Zabicki

Heimdal

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with improved locking.

CVE-2026-86915: Roman Zabicki

Heimdal

Impact: An attacker may be able to impersonate other users

Description: An authentication issue was addressed with improved state management.

CVE-2026-86868: Redon Gashi of Sentry

Heimdal

Impact: An app may be able to cause a denial-of-service

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86942: He Wei (ギカク)

HFS

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84581: Feng Xue and XGPT of ThreatBook, Alfredo Pesoli (@__rev) of Bynar.io, Jonathan Bar Or (@yo_yo_yo_jbo)

HFS

Impact: Mounting a malicious disk image may cause unexpected system termination

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-28934: Arni Hardarson (Neonix Security), Tristan Madani (@TristanInSec) from Talence Security, 정우 하, Aswin Kumar Gokulakannan, Peter Malone, Dun

iCloud

Impact: An app may be able to identify a user across reinstalls

Description: A privacy issue was addressed with improved handling of identifiers.

CVE-2026-84606: Ilya Andr (andrd3v)

Image Capture

Impact: An app may be able to access user-sensitive data

Description: A path handling issue was addressed with improved validation.

CVE-2026-64756: Luke Symons

ImageIO

Impact: Processing a maliciously crafted image may lead to a denial-of-service

Description: A memory corruption issue was addressed with improved bounds checking.

CVE-2026-64714: an anonymous researcher

ImageIO

Impact: Processing a maliciously crafted image may result in disclosure of process memory

Description: An uninitialized memory issue was addressed with improved memory initialization.

CVE-2026-84564: Justin O'Leary (@olearysec) of olearysec.com

ImageIO

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86869: Chris Bailey - Short Circuit, Meta Red Team X, Niels Hofmans, Geonha Lee (@leegn4a)

ImageIO

Impact: Processing a maliciously crafted image may result in memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-64750: Mateusz Jurczyk of Google Project Zero, Eddy Tsalolikhin, Johann Rehberger

CVE-2026-65395: Mateusz Jurczyk of Google Project Zero, Varik Matevosyan

ImageIO

Impact: Processing a maliciously crafted image may lead to unexpected process termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86975: Tommy DeVoss from Braze Security Team (@thedawgyg), an anonymous researcher

ImageIO

Impact: Processing a maliciously crafted image may lead to arbitrary code execution

Description: An integer overflow was addressed with improved input validation.

CVE-2026-64759: Musaab Khan (@bxff), XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine, Guannan Wang, Zhanpeng Liu, Jiashuo Liang, Guancheng Li, Iain Harkiss, Daniel Febrero

ImageIO

Impact: Processing a maliciously crafted image may lead to unexpected app termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86954: Mateusz Jurczyk of Google Project Zero

IOKit

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-28969: Mihalis Haatainen, Ashish Kunwar, Ari Hawking, 이재영

IOMobileFrameBuffer

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-65398: Chris Bailey - Short Circuit, Mustafa Calap (@ordinal0, dbg.re), David Strnadel, Meta Red Team X - Nik Tsytsarkin

IOSurfaceAccelerator

Impact: An app may be able to leak sensitive kernel state

Description: An information leakage was addressed with additional validation.

CVE-2026-64760: an anonymous researcher, Seiji Sakurai (@HeapSmasher), Franco Belman at Blackwing Intelligence

iWork

Impact: A malicious app may be able to break out of its sandbox

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65354: Csaba Fitzl (@theevilbit) of Iru

Kernel

Impact: Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory

Description: A memory corruption issue was addressed by removing the vulnerable code.

CVE-2026-84588: Narendra Singh (@_3P1C), Nathaniel Oh (@calysteon), an anonymous researcher

Kernel

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-28968: genter0, Svetoslav Stolarov, Josh Maine of Calif.io, Dun

Kernel

Impact: A local attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-84566: Bernhard Jackiewicz

Kernel

Impact: A local user may be able to cause unexpected system termination or read kernel memory

Description: A race condition was addressed with additional validation.

CVE-2026-65415: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ryan Hileman via Xint Code (xint.io)

Kernel

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A double free issue was addressed with improved memory management.

CVE-2026-84561: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Bhaswanth Chigurupati

Kernel

Impact: An app may be able to cause unexpected system termination

Description: A race condition was addressed with improved state handling.

CVE-2026-84630: Tristan Madani (@TristanInSec) from Talence Security

CVE-2026-65401: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-65360: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-65358: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to cause unexpected system termination

Description: A double free issue was addressed with improved memory management.

CVE-2026-84558: James Young

CVE-2026-86962: OpenAI, Hüseyin Kabasakal @HuseyinK01

Kernel

Impact: An app may be able to cause unexpected system termination

Description: A memory corruption issue was addressed with improved memory handling.

CVE-2026-65377: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd., Ye Zhang (@VAR10CK) of Baidu Security

Kernel

Impact: An app with root privileges may be able to read uninitialized kernel memory

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-84622: Hiroki Imai (LAC Co., Ltd.)

Kernel

Impact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84549: Aswin Kumar Gokulakannan, Surya Narayan Kushwaha

Kernel

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-43689: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

Kernel

Impact: An app may be able to cause unexpected system termination or write kernel memory

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84619: genter0, Eddy Tsalolikhin, James Duffy (@0x4A616D657344)

Kernel

Impact: A malicious application may bypass Gatekeeper checks

Description: A logic issue was addressed with improved state management.

CVE-2026-65369: an anonymous researcher

Kernel

Impact: An app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86917: Hiroki Imai (LAC Co., Ltd.)

Kernel

Impact: Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory

Description: An integer overflow was addressed with improved input validation.

CVE-2026-84544: Abhijeet Singh (www.linkedin.com/in/abhiunix/), Surya Narayan Kushwaha

Kernel

Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43790: Omar Cerrito

Kernel

Impact: Connecting to a malicious NFS server may disclose kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-43687: R4mbb of KRsecurity, Peter Malone

Kernel

Impact: Connecting to a malicious NFS server may lead to kernel memory corruption

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-43686: Peter Malone

Kernel

Impact: A remote attacker may be able to cause a denial-of-service

Description: A denial-of-service issue was addressed with improved input validation.

CVE-2026-84538: Stuart Thomas

Kernel

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-43684: Peter Malone

Kernel

Impact: An app may be able to determine kernel memory layout

Description: A memory initialization issue was addressed with improved memory handling.

CVE-2026-65405: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: A remote attacker may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-65364: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to disclose kernel memory

Description: An information disclosure issue was addressed with improved memory management.

CVE-2026-84530: Vladislav Shevchenko (Positive Technologies)

Kernel

Impact: An app may be able to cause unexpected system termination

Description: A use after free issue was addressed with improved memory management.

CVE-2026-84521: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

CVE-2026-65402: Fábio Luís @scanpt, Richard Zana, Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: A local user may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-65359: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to cause unexpected system termination

Description: An integer overflow was addressed with improved input validation.

CVE-2026-84517: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A race condition was addressed with improved state handling.

CVE-2026-84507: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to disclose kernel memory

Description: An out-of-bounds read was addressed with improved input validation.

CVE-2026-86903: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to cause unexpected system termination

Description: A type confusion issue was addressed with improved checks.

CVE-2026-84602: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

Kernel

Impact: An app may be able to cause unexpected system termination

Description: A null pointer dereference was addressed with improved input validation.

CVE-2026-86964: Ryan Hileman via Xint Code (xint.io)

Kernel

Impact: An app may be able to execute arbitrary code with kernel privileges

Description: A use after free issue was addressed with improved memory management.

CVE-2026-86916: Wang Yu

Kernel

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-84599: an anonymous researcher

Kext Management

Impact: An app may be able to modify protected parts of the file system

Description: This issue was addressed with additional entitlement checks.

CVE-2026-84514: Mohamed Wedatalla, Arjanit Isufi, Nathaniel Oh (@calysteon)

Keychain Access

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved access control.

CVE-2026-84556: Adrián Díaz Aguilar, Chris Bailey - Short Circuit, Peter Malone, HvxyZLF

LaunchServices

Impact: An app may be able to access sensitive user data

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-65382: an anonymous researcher

LaunchServices

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-86932: Shuiliang Xie

libarchive

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: A heap buffer overflow was addressed with improved bounds checking.

CVE-2026-86870: Kitten Food

libxpc

Impact: An app may be able to break out of its sandbox

Description: A logic issue was addressed with improved checks.

CVE-2026-86894: Dave G.

libxpc

Impact: An app may be able to bypass sandbox restrictions

Description: An access issue was addressed with additional sandbox restrictions.

CVE-2026-84577: Dave G. and Alex Radocea of supernetworks.org

Mail

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-84573: Dawuge of Shuffle Team

Mail

Impact: An attacker in a privileged network position may be able to leak sensitive user information

Description: A logic issue was addressed with improved checks.

CVE-2026-43787: Armend Gashi

mDNSResponder

Impact: An app may be able to access sensitive network connection information

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-86914: Richard Zana

MediaRemote

Impact: A sandboxed app may be able to access the System Keychain

Description: An authorization issue was addressed with improved state management.

CVE-2026-84628: Myeonghun Pak, Nathaniel Oh (@calysteon), Alan Banderas (@creeper4004)

Messages

Impact: An app may be able to access protected user data

Description: A logic issue was addressed with improved state management.

CVE-2026-43741: Dawuge of Shuffle Team

Messages

Impact: Processing a maliciously crafted image may lead to unexpected process termination

Description: An input validation issue was addressed with improved input validation.

CVE-2026-86959: an anonymous researcher

Metal

Impact: An app may be able to read files outside of its sandbox

Description: An access issue was addressed with improved access restrictions.

CVE-2026-84542: Mustafa Ahmed, an anonymous researcher

MobileAccessoryUpdater

Impact: Connecting a malicious accessory may cause unexpected system termination

Description: A memory corruption issue was addressed with improved input validation.

CVE-2026-86924: Matthew Zamat

Model I/O

Impact: Opening a maliciously crafted file may lead to unexpected process termination

Description: A buffer overflow was addressed with improved size validation.

CVE-2026-84497: Yiğit Can YILMAZ (@yilmazcanyigit)

Multi-Touch

Impact: A malicious application may be able to bypass Privacy preferences

Description: A race condition was addressed with additional validation.

CVE-2026-65372: 이재영

NetworkExtension

Impact: An app may be able to access local network devices without user consent

Description: A permissions issue was addressed with improved state management.

CVE-2026-84585: Dmytro Merkulov

NetworkExtension

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-43695: Claudio Bozzato and Francesco Benvenuto of Cisco Talos

NetworkExtension

Impact: An app may be able to identify what other apps a user has installed

Description: An information disclosure issue was addressed with improved state management.

CVE-2026-84626: Hoffcona of IES Red Team

NSDocument

Impact: An app may be able to access sensitive user data

Description: A parsing issue in the handling of directory paths was addressed with improved path validation.

CVE-2026-86902: silo

odproxyd

Impact: An app may be able to gain root privileges

Description: This issue was addressed with improved checks.

CVE-2026-64712: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs

OpenBSM

Impact: Processing a maliciously crafted audit file may corrupt process memory

Description: A stack buffer overflow was addressed through improved input validation.

CVE-2026-84604: Tristan Madani (Talence Security)

Photos Storage

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-84491: an anonymous researcher

quarantine

Impact: An app may be able to break out of its sandbox

Description: The issue was addressed with improved checks.

CVE-2026-84580: an anonymous researcher

quarantine

Impact: An app may be able to break out of its sandbox

Description: A logic issue was addressed with improved checks.

CVE-2026-84578: Kenneth Chew

quarantine

Impact: A malicious application may bypass Gatekeeper checks

Description: This issue was addressed with improved validation of file attributes.

CVE-2026-64789: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, an anonymous researcher

QuartzCore

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-84576: Dora Orak, @Ethan Arbuckle, and @leptos_null

Quick Look

Impact: Processing a maliciously crafted document may lead to an out-of-bounds read

Description: An integer overflow was addressed with improved input validation.

CVE-2026-84548: Peter Malone

RawCamera

Impact: Processing a maliciously crafted image may lead to heap corruption

Description: A buffer overflow was addressed with improved bounds checking.

CVE-2026-84627: Mateusz Jurczyk of Google Project Zero, Piotr Jerzy Duszynski, f0r of MurphySec, PETOWORKS의 Bugeun Choi (@Bugeun), Rahul Raj, ธนกฤต ทัฬหะ

RealityKit

Impact: Processing a maliciously crafted file may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-28966: stratan (@5tratan)

RealityKit

Impact: Opening a maliciously crafted file may cause unexpected process termination or disclose process memory

Description: An out-of-bounds read issue was addressed with improved input validation.

CVE-2026-84532: Franco Belman at Blackwing Intelligence, Hongsik Kim (mnur), stratan (@5tratan)

Reminders

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-65403: Rahul Raj

Safari

Impact: A malicious website may be able to determine what apps a user has installed

Description: This issue was addressed through improved state management.

CVE-2026-84518: Bálint Magyar (balintmagyar.com)

Safe Browsing

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with additional entitlement checks.

CVE-2026-86897: Stuart Wallace

Sandbox

Impact: An app may be able to access protected user data

Description: An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic.

CVE-2026-65380: Kieran Klukas (taciturnaxolotl)

Sandbox

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved access control.

CVE-2026-84555: Liu Xue & 九宫格 of Chongqing Telecom

Sandbox

Impact: An app may be able to bypass network restrictions

Description: A logic issue was addressed with improved validation.

CVE-2026-84551: Issa Sancho

Sandbox

Impact: An app may be able to access information about a user's contacts

Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-86933: @08Tc3wBB of Jamf

Sandbox

Impact: An app with root privileges may be able to access private information

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65392: Prathamesh Walunj, Csaba Fitzl (@theevilbit) of Iru, Ahmad Al Harrizuan Izadin

Sandbox Profiles

Impact: An app may be able to fingerprint the user

Description: A permissions issue was addressed with additional sandbox restrictions.

CVE-2026-84625: Ilya Andr (andrd3v) of Positive Technologies, CJ Vana

SceneKit

Impact: Processing a maliciously crafted 3D file may lead to an out-of-bounds read

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-43697: an anonymous researcher, Peter Malone

SceneKit

Impact: Processing a maliciously crafted file may result in disclosure of process memory

Description: An integer overflow was addressed with improved input validation.

CVE-2026-84487: stratan (@5tratan), Dhiyanesh Selvaraj (@redroot97), Peter Malone

SceneKit

Impact: An app may be able to cause a denial of service

Description: An integer overflow was addressed with improved input validation.

CVE-2026-65413: Peter Malone

SceneKit

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: The issue was addressed with improved memory handling.

CVE-2026-84632: Peter Malone

SceneKit

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An integer overflow was addressed with improved input validation.

CVE-2026-84620: Peter Malone

SceneKit

Impact: Processing a maliciously crafted 3D model may lead to memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84546: Narendra Singh (@_3P1C), stratan (@5tratan), Peter Malone

CVE-2026-84611: Nathaniel Oh (@calysteon)

SceneKit

Impact: Processing a maliciously crafted 3D scene may lead to unexpected process termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84526: stratan (@5tratan)

Screen Sharing Server

Impact: An attacker on the network may be able to authenticate to Screen Sharing without valid credentials

Description: An authentication issue was addressed with improved state management.

CVE-2026-65400: Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io)

Screen Sharing Server

Impact: A malicious app may be able to gain root privileges

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65373: Anon Tuttu Venus, Stefan Esser (Calif), Alfredo Pesoli (@__rev) via Bynario Atlas (bynar.io), Nathaniel Oh (@calysteon)

Security

Impact: An attacker in a privileged network position may be able to intercept network traffic

Description: A certificate validation issue was addressed with improved certificate validation.

CVE-2026-86889: Jaeho Nam, Jungbum Lee, Sangwi Kang, Hyeonguk Ko and Taekyoung Kwon from SNU CSE MMLAB (mmlab.snu.ac.kr)

Security

Impact: An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages

Description: A certificate validation issue was addressed with improved certificate validation.

CVE-2026-86881: Surya Narayan Kushwaha, Roman Zabicki, John Lussier, Filip Olszak

Security

Impact: Processing maliciously crafted NTLM input may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84531: Meshaal (@unrealmesh)

Security

Impact: An app may be able to access protected user data

Description: This issue was addressed with improved validation of the caller's access.

CVE-2026-84508: Abodi Dawoud, Merrick Hare, Roelof van Dijk

Security

Impact: An app may be able to break out of its sandbox

Description: The issue was addressed with improved checks.

CVE-2026-65363: Csaba Fitzl (@theevilbit) of Iru and Gergely Kalman (@gergely_kalman), Arni Hardarson (Neonix Security)

Security

Impact: An app may be able to access sensitive user data

Description: A privacy issue was addressed with improved memory management.

CVE-2026-86931: Pranav Gopalkrishnan, Alan Wang, Ailsa Sun, Hovav Shacham, Riccardo Paccagnella, Chris Fletcher, David Kohlbrenner

Shortcuts

Impact: A malicious shortcut may be able to send messages without user confirmation

Description: An authorization issue was addressed with improved state management.

CVE-2026-84600: Owen Pawling (@owenpawling)

Siri

Impact: An app may be able to access sensitive user data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-86884: Stanislav Jelezoglo, Gongyu Ma (twitter @Mezone0)

Siri

Impact: A local attacker may be able to overwrite restricted files

Description: A permissions issue was addressed with improved validation.

CVE-2026-86921: Jonghoon Han (Aegis), bubu, 이재영, Tae Woo Kim, Dawuge of Shuffle Team

Siri

Impact: An app may be able to access sensitive user data

Description: An access issue was addressed with improved access controls.

CVE-2026-65356: Ricardo Prado

Siri

Impact: An app may be able to access sensitive user data

Description: An information disclosure issue was addressed with improved privacy controls.

CVE-2026-86923: Sindre Sorhus, Asaf Cohen

Siri

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-43736: Abodi Dawoud, Guilherme Rambo of Best Buddy Apps (rambo.codes)

SMB

Impact: A local user may be able to read kernel memory

Description: A race condition was addressed with improved locking.

CVE-2026-43690: Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

SMB

Impact: Mounting a maliciously crafted SMB network share may lead to system termination

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-43719: Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

SMB

Impact: An app may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-65376: 재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

SMB

Impact: Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory

Description: An out-of-bounds access issue was addressed with improved bounds checking.

CVE-2026-84543: Peter Malone

SMB

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-84537: Feng Xue and XGPT of ThreatBook, Peter Malone

SMB

Impact: Connecting to a malicious SMB server may lead to unexpected system termination

Description: An integer underflow was addressed with improved input validation.

CVE-2026-84536: 재영 정, Feng Xue and XGPT of ThreatBook, Peter Malone

SMB

Impact: Connecting to a malicious SMB share may disclose kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-65365: Jay Patel, Peter Malone

SMB

Impact: Connecting to a malicious SMB server may lead to kernel memory corruption

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-84515: 재영 정, Peter Malone

SMB

Impact: Connecting to a malicious SMB server may lead to unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84509: Dave G.

SMB

Impact: An attacker with control of a network file server may be able to cause unexpected system termination

Description: An integer underflow was addressed with improved input validation.

CVE-2026-86871: Ashish Kunwar, Cem Onat Karagun, John Lussier

smbx

Impact: A remote attacker may be able to cause a denial-of-service

Description: A resource exhaustion issue was addressed with improved input validation.

CVE-2026-84553: Stuart Thomas

Software Update

Impact: An app may be able to modify protected system files

Description: A permissions issue was addressed with improved path validation.

CVE-2026-84609: YingMuo (@YingMuo) of DEVCORE Research Team

SoftwareUpdate

Impact: An app may be able to access sensitive user data

Description: This issue was addressed with improved checks.

CVE-2026-65361: Rodolphe BRUNETTI (@eisw0lf) of Lupus Nova

Spotlight

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-65378: 杉山壮太, AL Najafi, Richard Zana, Abodi Dawoud, Sindre Sorhus, 糖豆爸爸(@晴天组织), Niels Hofmans, Robert Mindo

Spotlight

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved access control.

CVE-2026-84621: Abodi Dawoud, Armend Gashi, Ujjwal Reddy Kalvolu Sreenivasa Reddy, Johan Wahyudi

Spotlight

Impact: Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

Description: An integer overflow was addressed with improved input validation.

CVE-2026-43788: Narendra Singh (@_3P1C), Ashish Kunwar

Spotlight

Impact: An app may be able to access sensitive user data

Description: A privacy issue was addressed with improved checks.

CVE-2026-86979: Paul Montgomery (@nullevent), Alan Banderas (@creeper4004)

Storage

Impact: An app may be able to modify protected parts of the file system

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65348: Jérôme Djouder

Storage

Impact: An app may be able to access user-sensitive data

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-65345: Seung Je Seong, Ilya Andr (andrd3v) of Positive Technologies, Jakob Pammer, 이재영

StorageKit

Impact: An app may be able to read arbitrary files

Description: A validation issue was addressed with improved input sanitization.

CVE-2026-43791: Meridian Miftari, Amy (amys.website), Aaron Grattafiori - NVIDIA AI Red Team

Symptom Framework

Impact: A malicious application may be able to determine a user's current location

Description: A privacy issue was addressed with improved private data redaction for log entries.

CVE-2026-84513: Sindre Sorhus

Sync Services

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-86976: Kirin (@Pwnrin)

System Settings

Impact: An app may bypass Gatekeeper checks

Description: This issue was addressed with improved checks.

CVE-2026-65383: Zhongquan Li (@Guluisacat)

System Settings

Impact: An app may be able to bypass Gatekeeper checks

Description: A logic issue was addressed with improved state management.

CVE-2026-86909: Koh M. Nakagawa (@tsunek0h) of FFRI Security, Inc.

System Settings

Impact: A maliciously modified app may not be prevented from launching

Description: The issue was addressed with additional app bundle integrity checks.

CVE-2026-28854: deepsec of DARKNAVY (@DarkNavyOrg), Mickey Jin (@patch1t), Rohit Chatterjee, Zhongquan Li (@Guluisacat), Lance Cain - Senior Consultant at SpecterOps Inc.

TCC

Impact: An app may be able to access sensitive user data

Description: A logging issue was addressed with improved data redaction.

CVE-2026-84527: Zeyang Li&Yuxiang Wang of Chongqing Telecom

TCC

Impact: An app may be able to modify Privacy preferences

Description: A permissions issue was addressed with additional restrictions.

CVE-2026-84589: an anonymous researcher, Rodolphe Brunetti (@eisw0lf), Ryan Dowd (@_rdowd), Isaiah Ryan Ehlert (isaiahehlert@icloud.com), Csaba Fitzl (@theevilbit) of Iru

Terminal

Impact: An app may be able to access sensitive user data

Description: This issue was addressed through improved state management.

CVE-2026-28937: Charlie Weiss, Noah Gregory (wts.dev)

Touch Bar

Impact: An app may be able to capture Touch Bar content without authorization

Description: An authorization issue was addressed with improved entitlement checks.

CVE-2026-43696: an anonymous researcher

TV App

Impact: An app may be able to access user-sensitive data

Description: This issue was addressed by removing additional entitlements.

CVE-2026-86935: Joshua Jewett (@JoshJewett33)

udf

Impact: An app may be able to cause unexpected system termination or read kernel memory

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-84572: Tomi (tk0) Koski (@tomikoski), Hari Shanmugam (The Hxr1)

udf

Impact: An app may be able to cause unexpected system termination or corrupt kernel memory

Description: A use after free issue was addressed with improved memory management.

CVE-2026-84506: Billy Jheng Bing Jhong and Pan Zhenpeng (@Peterpan0927) of STAR Labs SG Pte. Ltd.

udf

Impact: An app may be able to disclose kernel memory

Description: The issue was addressed with improved memory handling.

CVE-2026-84498: Nathaniel Oh (@calysteon)

WebDAV

Impact: An app may bypass Gatekeeper checks

Description: A logic issue was addressed with improved checks.

CVE-2026-28899: Andreas Jaegersberger & Ro Achterberg of Nosebeard Labs, Kraken Cryptocurrency Exchange

WebDAV

Impact: Connecting to a malicious WebDAV server may result in code execution

Description: A memory corruption issue was addressed with improved validation.

CVE-2026-65374: HE WEI（ギカク）, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

WebDAV

Impact: An app may be able to cause unexpected system termination

Description: The issue was addressed with improved authentication.

CVE-2026-65375: YingMuo (@YingMuo) of DEVCORE Research Team, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

WebDAV

Impact: Connecting to a malicious WebDAV server may lead to unexpected app termination

Description: An out-of-bounds write issue was addressed by removing the vulnerable code.

CVE-2026-43677: Joseph Semaan, bubu, Omar Cerrito, HE WEI (ギカク), Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

WebKit

Impact: Processing maliciously crafted web content may lead to an unexpected process termination

Description: A logic issue was addressed with improved state management.

CVE-2026-84635: Souta Sugiyama

WebKit

Impact: Processing maliciously crafted web content may disclose sensitive user information

Description: A permissions issue was addressed by removing the vulnerable code.

CVE-2026-64753: Viggo Lekdorf

WebKit

Impact: Opening a maliciously crafted webarchive file may lead to universal cross-site scripting

Description: A logic issue was addressed with improved state management.

CVE-2026-86898: Tomi Garcia (archyxsec)

WebKit

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A type confusion issue was addressed with improved state management.

CVE-2026-86922: Nathaniel Oh (@calysteon), Kwak Kiyong / kakaogames

WebKit Canvas

Impact: Processing maliciously crafted web content may lead to an unexpected Safari crash

Description: A use-after-free issue was addressed with improved memory management.

CVE-2026-64718: Niels Hofmans, OGINOME Tomohito, an anonymous researcher

Wi-Fi

Impact: An attacker in physical proximity may be able to cause a denial-of-service

Description: An out-of-bounds write issue was addressed with improved bounds checking.

CVE-2026-86953: Efstratios Kaplanellis (@5tratan) of Almamater Technologies, Jakob Pammer

Wi-Fi

Impact: An attacker in wireless proximity may be able to cause unexpected system termination

Description: An out-of-bounds read was addressed with improved bounds checking.

CVE-2026-86957: Drin Raci of sentry.security, Niels Hofmans

WindowServer

Impact: An app may be able to access sensitive user data

Description: The issue was addressed with improved handling of secure input state.

CVE-2026-65379: Ricardo Prado

Xcode IDE

Impact: An app may be able to access user-sensitive data

Description: A permissions issue was addressed with improved validation.

CVE-2026-65393: Mickey Jin (@patch1t)

XPC

Impact: An app may be able to access sensitive user data

Description: An authorization issue was addressed with improved state management.

CVE-2026-84617: Stuart Wallace

Products covered

MacBook Neo (2026), MacBook Air with Apple silicon (2020 and later), MacBook Pro with Apple silicon (2020 and later), iMac with Apple silicon (2021 and later), Mac mini with Apple silicon (2020 and later), Mac Studio (2022 and later), and Mac Pro with Apple silicon (2023)

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 274

CVE-2026-86882 CVE-2026-86918 CVE-2026-43664 CVE-2026-65404 CVE-2026-112446 CVE-2026-86940 CVE-2026-86910 CVE-2026-84523 CVE-2026-65396 CVE-2026-84582 CVE-2026-86888 CVE-2026-84587 CVE-2026-84586 CVE-2026-20683 CVE-2026-84601 CVE-2026-86920 CVE-2026-65408 CVE-2026-84634 CVE-2026-84633 CVE-2026-86877 CVE-2026-84595 CVE-2026-65407 CVE-2026-84519 CVE-2026-84520 CVE-2026-65381 CVE-2026-84584 CVE-2026-84522 CVE-2026-84525 CVE-2026-65342 CVE-2026-86905 CVE-2026-84583 CVE-2026-84570 CVE-2026-84568 CVE-2026-84535 CVE-2026-65410 CVE-2026-84616 CVE-2026-84607 CVE-2026-65406 CVE-2026-84560 CVE-2026-84631 CVE-2026-84547 CVE-2026-84613 CVE-2026-84610 CVE-2026-84528 CVE-2026-84567 CVE-2026-65399 CVE-2026-86966 CVE-2026-86891 CVE-2026-86919 CVE-2026-112608 CVE-2026-43683 CVE-2026-43789 CVE-2026-64752 CVE-2026-86876 CVE-2026-65344 CVE-2026-86913 CVE-2026-84624 CVE-2026-43737 CVE-2026-84574 CVE-2026-84559 CVE-2026-43786 CVE-2026-65368 CVE-2026-65412 CVE-2026-84596 CVE-2026-84575 CVE-2026-84489 CVE-2026-84571 CVE-2026-43738 CVE-2026-84511 CVE-2026-84563 CVE-2026-34979 CVE-2026-43698 CVE-2026-64790 CVE-2026-43692 CVE-2026-84554 CVE-2026-43691 CVE-2026-84541 CVE-2026-84540 CVE-2026-84516 CVE-2026-84545 CVE-2026-84579 CVE-2026-84612 CVE-2026-84505 CVE-2026-84565 CVE-2026-84552 CVE-2026-84550 CVE-2026-65362 CVE-2026-84512 CVE-2026-86958 CVE-2026-84510 CVE-2026-86901 CVE-2026-86900 CVE-2026-43785 CVE-2026-84534 CVE-2026-43688 CVE-2026-84524 CVE-2026-84597 CVE-2026-84569 CVE-2026-65409 CVE-2026-86911 CVE-2026-86961 CVE-2026-84618 CVE-2026-84539 CVE-2026-86928 CVE-2026-86929 CVE-2026-84492 CVE-2026-84533 CVE-2022-3437 CVE-2026-86915 CVE-2026-86868 CVE-2026-86942 CVE-2026-84581 CVE-2026-28934 CVE-2026-84606 CVE-2026-64756 CVE-2026-64714 CVE-2026-84564 CVE-2026-86869 CVE-2026-64750 CVE-2026-65395 CVE-2026-86975 CVE-2026-64759 CVE-2026-86954 CVE-2026-28969 CVE-2026-65398 CVE-2026-64760 CVE-2026-65354 CVE-2026-84588 CVE-2026-28968 CVE-2026-84566 CVE-2026-65415 CVE-2026-84561 CVE-2026-84630 CVE-2026-65401 CVE-2026-65360 CVE-2026-65358 CVE-2026-84558 CVE-2026-86962 CVE-2026-65377 CVE-2026-84622 CVE-2026-84549 CVE-2026-43689 CVE-2026-84619 CVE-2026-65369 CVE-2026-86917 CVE-2026-84544 CVE-2026-43790 CVE-2026-43687 CVE-2026-43686 CVE-2026-84538 CVE-2026-43684 CVE-2026-65405 CVE-2026-65364 CVE-2026-84530 CVE-2026-84521 CVE-2026-65402 CVE-2026-65359 CVE-2026-84517 CVE-2026-84507 CVE-2026-86903 CVE-2026-84602 CVE-2026-86964 CVE-2026-86916 CVE-2026-84599 CVE-2026-84514 CVE-2026-84556 CVE-2026-65382 CVE-2026-86932 CVE-2026-86870 CVE-2026-86894 CVE-2026-84577 CVE-2026-84573 CVE-2026-43787 CVE-2026-86914 CVE-2026-84628 CVE-2026-43741 CVE-2026-86959 CVE-2026-84542 CVE-2026-86924 CVE-2026-84497 CVE-2026-65372 CVE-2026-84585 CVE-2026-43695 CVE-2026-84626 CVE-2026-86902 CVE-2026-64712 CVE-2026-84604 CVE-2026-84491 CVE-2026-84580 CVE-2026-84578 CVE-2026-64789 CVE-2026-84576 CVE-2026-84548 CVE-2026-84627 CVE-2026-28966 CVE-2026-84532 CVE-2026-65403 CVE-2026-84518 CVE-2026-86897 CVE-2026-65380 CVE-2026-84555 CVE-2026-84551 CVE-2026-86933 CVE-2026-65392 CVE-2026-84625 CVE-2026-43697 CVE-2026-84487 CVE-2026-65413 CVE-2026-84632 CVE-2026-84620 CVE-2026-84546 CVE-2026-84611 CVE-2026-84526 CVE-2026-65400 CVE-2026-65373 CVE-2026-86889 CVE-2026-86881 CVE-2026-84531 CVE-2026-84508 CVE-2026-65363 CVE-2026-86931 CVE-2026-84600 CVE-2026-86884 CVE-2026-86921 CVE-2026-65356 CVE-2026-86923 CVE-2026-43736 CVE-2026-43690 CVE-2026-43719 CVE-2026-65376 CVE-2026-84543 CVE-2026-84537 CVE-2026-84536 CVE-2026-65365 CVE-2026-84515 CVE-2026-84509 CVE-2026-86871 CVE-2026-84553 CVE-2026-84609 CVE-2026-65361 CVE-2026-65378 CVE-2026-84621 CVE-2026-43788 CVE-2026-86979 CVE-2026-65348 CVE-2026-65345 CVE-2026-43791 CVE-2026-84513 CVE-2026-86976 CVE-2026-65383 CVE-2026-86909 CVE-2026-28854 CVE-2026-84527 CVE-2026-84589 CVE-2026-28937 CVE-2026-43696 CVE-2026-86935 CVE-2026-84572 CVE-2026-84506 CVE-2026-84498 CVE-2026-28899 CVE-2026-65374 CVE-2026-65375 CVE-2026-43677 CVE-2026-84635 CVE-2026-64753 CVE-2026-86898 CVE-2026-86922 CVE-2026-64718 CVE-2026-86953 CVE-2026-86957 CVE-2026-65379 CVE-2026-65393 CVE-2026-84617

Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

Oct 27, 2026 at 1:15 AM UTC
- Added CVEs: CVE-2026-43736, CVE-2026-64750, CVE-2026-64759, CVE-2026-64789, CVE-2026-65363.
Oct 20, 2026 at 7:45 PM UTC
- Added CVEs: CVE-2026-28854, CVE-2026-65356, CVE-2026-65372, CVE-2026-65379, CVE-2026-65396.

Updates

Sep 14, 2026 at 12:00 AM UTC
Published by Apple Security Releases
The publication date reported by the vendor.
Sep 29, 2026 at 2:54 AM UTC
Added to SecurityAlert
We collected the advisory from the official source.
Oct 28, 2026 at 1:45 AM UTC
Confirmed at the source
Our collector saw this advisory during a later source check.

Source

Details collected from Apple Security Releases.

Vendor: Apple Security Releases
Advisory ID: 149035
Last source check: Nov 13, 2026 at 2:55 PM UTC

Official bulletin How SecurityAlert builds this record

Your environment

Check the systems you actually run

A vendor advisory can tell you what may be affected. It cannot tell you whether that product and version are installed in your environment.

Confirm the product and installed version.
Read the vendor's prerequisites and exceptions.
Test the update or mitigation through your normal change process.

Keep following

Get new Apple Security Releases advisories

Use the vendor-specific RSS feed or set up alerts for a product your team relies on.

Follow this vendor's RSS feed

Summary

Products covered

Remediation

CVEs in this advisory 274

What changed in later vendor updates

Updates

Related advisories from Apple Security Releases

macOS Tahoe 26.7

macOS Sequoia 15.8

iOS 27 and iPadOS 27

visionOS 27

watchOS 27

tvOS 27