https://vulnerability.circl.lu Vulnerabilities published under the CPE names of macOS. http://www.rssboard.org/rss-specification python-feedgen en Tue, 15 Sep 2026 22:21:31 +0000 https://vulnerability.circl.lu/vuln/cve-2026-28937 This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. https://vulnerability.circl.lu/vuln/cve-2026-28937 Mon, 14 Sep 2026 20:52:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43690 A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory. A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A local user may be able to read kernel memory. https://vulnerability.circl.lu/vuln/cve-2026-43690 Mon, 14 Sep 2026 20:51:52 +0000 https://vulnerability.circl.lu/vuln/cve-2026-84534 A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files. A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27. Extracting a maliciously crafted archive may allow an attacker to write arbitrary files. https://vulnerability.circl.lu/vuln/cve-2026-84534 Mon, 14 Sep 2026 20:51:54 +0000 https://vulnerability.circl.lu/vuln/cve-2026-84563 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination. A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system termination. https://vulnerability.circl.lu/vuln/cve-2026-84563 Mon, 14 Sep 2026 20:51:55 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43741 A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data. A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access protected user data. https://vulnerability.circl.lu/vuln/cve-2026-43741 Mon, 14 Sep 2026 20:52:01 +0000 https://vulnerability.circl.lu/vuln/cve-2026-84535 An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox. An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to break out of its sandbox. https://vulnerability.circl.lu/vuln/cve-2026-84535 Mon, 14 Sep 2026 20:51:00 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65404 An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences. An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A malicious application may be able to bypass Privacy preferences. https://vulnerability.circl.lu/vuln/cve-2026-65404 Mon, 14 Sep 2026 20:51:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-65412 A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service. A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. Processing web content may lead to a denial-of-service. https://vulnerability.circl.lu/vuln/cve-2026-65412 Mon, 14 Sep 2026 20:51:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86894 A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. https://vulnerability.circl.lu/vuln/cve-2026-86894 Mon, 14 Sep 2026 20:51:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-84515 An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to kernel memory corruption. An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to kernel memory corruption. https://vulnerability.circl.lu/vuln/cve-2026-84515 Mon, 14 Sep 2026 20:51:11 +0000