NCSC-2026-0371
Vulnerability from csaf_ncscnl - Published: 2026-09-15 15:41 - Updated: 2026-09-15 15:41Summary
Kwetsbaarheden verholpen in Apple macOS en Samba door Apple en Samba
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Apple heeft meerdere kwetsbaarheden verholpen in macOS (Specifiek voor Golden Gate 27, Sequoia 15.8, Tahoe 26.7).
Interpretaties: De kwetsbaarheden in macOS betreffen onder andere heap-based buffer overflows, use-after-free fouten, integer overflows, null pointer dereferences, onjuiste toegangscontrole, privilege escalatie, race conditions, out-of-bounds reads en writes, loggingsproblemen, en problemen met state management. Deze kunnen leiden tot onverwachte systeem- of applicatie-terminaties, kernel geheugen corruptie, ongeautoriseerde toegang tot gevoelige gebruikersdata, omzeilen van sandbox- en Gatekeeper-beveiligingen, en het mogelijk maken van remote code execution of denial-of-service.
Oplossingen: Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-122: Heap-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-190: Integer Overflow or Wraparound
CWE-280: Improper Handling of Insufficient Permissions or Privileges
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-404: Improper Resource Shutdown or Release
CWE-416: Use After Free
CWE-451: User Interface (UI) Misrepresentation of Critical Information
CWE-642: External Control of Critical State Data
CWE-787: Out-of-bounds Write
CWE-862: Missing Authorization
Multiple updates to Samba (versions 4.15.9 through 4.15.13) and Libheimdal (7.8.0) address critical security vulnerabilities including heap-based buffer overflows, use-after-free bugs, integer overflows, information disclosure, and Active Directory password bypasses.
6.5 (Medium)
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Apple / macOS
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / macOS Golden Gate
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / macOS Sequoia
|
vers:unknown/* | ||
|
vers:unknown/*
Apple / macOS Tahoe
|
vers:unknown/* |
An authentication vulnerability in the Sign In With Apple flow was resolved by enhancing state management across iOS 27, iPadOS 27, and multiple macOS versions to prevent unauthorized access to user Apple accounts.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw allowing applications to bypass Gatekeeper checks was resolved through enhanced verification in macOS versions Golden Gate 27, Sequoia 15.8, Tahoe 26.6, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Tahoe 26.5 addressed a permissions vulnerability by implementing additional restrictions to prevent unauthorized app access to protected user data.
7.5 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability causing unexpected system termination when mounting malicious disk images has been fixed in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling flaw causing unexpected system termination or kernel memory corruption was resolved in iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue allowing an app to access sensitive user data was addressed by improving state management and resolved in macOS Golden Gate 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing unexpected app termination was addressed through improved bounds checking in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing potential system termination or kernel memory corruption was addressed by Apple through enhanced bounds checking in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use after free vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed to prevent apps from causing unexpected system termination.
7.5 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
OpenPrinting CUPS versions 2.4.16 and earlier contain multiple vulnerabilities including a heap-based buffer overflow in the scheduler's get_options() function, authorization bypass, path traversal, unauthorized code execution, and denial of service issues.
5.3 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An app vulnerability allowing potential access to sensitive user data was addressed with enhanced data protection across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and watchOS versions 26.7 through 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing unexpected application termination when connecting to a malicious WebDAV server was fixed by removing the vulnerable code in specific macOS versions.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability causing potential process termination or memory disclosure was addressed through enhanced bounds checking in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability causing potential system termination or kernel memory corruption was addressed via improved memory management in iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and macOS Sequoia 15.8.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability causing kernel memory corruption when connecting to malicious NFS servers was fixed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
8.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Apple fixed a kernel memory disclosure vulnerability related to malicious NFS server connections across multiple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability causing unexpected app termination via malicious files was fixed by improved input validation in iOS 27, iPadOS 27, and macOS Golden Gate 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing malicious apps to gain root privileges was addressed with enhanced restrictions in iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, and visionOS 27.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability allowing local users to read kernel memory was resolved through enhanced locking mechanisms in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A path handling vulnerability allowing privilege escalation to root was addressed through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A validation flaw in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was resolved by enhancing input sanitization to prevent remote exploitation leading to app termination or arbitrary code execution.
8.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization flaw allowing potential exposure of sensitive user data was addressed through enhanced state management across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability in macOS Golden Gate 27 allowed unauthorized capture of Touch Bar content, which was resolved by enhancing entitlement checks.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by enhancing bounds checking during the processing of maliciously crafted 3D files.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An injection vulnerability allowing an application to gain root privileges was addressed through improved validation in multiple macOS versions including Golden Gate 27, Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling vulnerability causing potential app termination or memory corruption when processing malicious video files has been resolved in multiple Apple OS versions including iOS, iPadOS, macOS, tvOS, and watchOS 26.6 and 26.7 releases.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 that could cause system termination when mounting a malicious SMB share was fixed by improving memory management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing unauthorized access to motion data from headphones without user consent was resolved through enhanced validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and watchOS.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling vulnerability causing potential process memory disclosure via malicious asset catalogs was fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, and macOS Sonoma 14.8.8.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw in state management allowing unauthorized access to protected user data was resolved in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition was resolved through improved state handling across multiple Apple operating systems, preventing applications from causing unexpected system termination.
4.7 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An access control vulnerability allowing applications to access user-sensitive data was addressed through enhanced restrictions in macOS Sonoma 14.8.8 and macOS Tahoe versions 26.6 and 26.7.
8.6 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing applications to read files outside their sandbox was resolved by removing vulnerable code in macOS Sequoia 15.7.8, 15.8, Sonoma 14.8.8, and Tahoe 26.6, 26.7.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability in Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 allowed applications to modify files despite having only read access, which has been fixed.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing an application to potentially escalate to root privileges was addressed through enhanced entitlement checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw allowing privileged network attackers to leak sensitive user data was resolved through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability in macOS Golden Gate 27 was addressed by enhancing input validation to prevent denial-of-service attacks and potential memory disclosure from maliciously crafted files.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An access control vulnerability allowing applications to potentially access user-sensitive data was addressed by implementing additional sandbox restrictions in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing remote attacks to cause system termination or kernel memory corruption was addressed by enhanced memory handling in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A validation flaw allowing arbitrary file reading by an app was resolved via enhanced input sanitization in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing an application to potentially escalate to root privileges was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability causing denial-of-service via malicious image processing was addressed with enhanced bounds checking in iOS 18.7.10, iPadOS 18.7.10, and multiple macOS versions.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability in Safari and related Apple OS versions was fixed by improving memory management to prevent crashes caused by maliciously crafted web content.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds access vulnerability causing potential system termination or kernel memory corruption was addressed with enhanced bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
7.1 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability enabling arbitrary code execution via crafted images was resolved by removing vulnerable code in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27.
7.3 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability in Safari 27 and related OS versions was fixed by removing vulnerable code that could lead to the disclosure of sensitive user information from maliciously crafted web content.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A path handling vulnerability allowing unauthorized access to user-sensitive data was addressed through enhanced validation in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue causing unexpected application termination when processing maliciously crafted files was resolved through improved bounds checks in multiple Apple operating systems version 26.6.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An information leakage vulnerability allowing apps to leak sensitive kernel state was addressed with additional validation in multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, and watchOS versions 18.7.10 and 27.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A path handling vulnerability allowing privilege escalation was addressed through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue causing potential unexpected system termination or kernel memory corruption was resolved through improved memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic issue was fixed with enhanced checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS to prevent apps from potentially leaking sensitive user information.
5.0 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions issue allowing an app to access sensitive user data was resolved through improved validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7 and 27 was addressed by improved bounds checking to prevent unexpected app termination from malicious video files.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing unauthorized app access to user-sensitive data was addressed with enhanced restrictions in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability in image processing, fixed by improved input validation, could lead to arbitrary code execution across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
8.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing unauthorized modification of protected file system areas was resolved in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability affecting multiple Apple operating systems was fixed through improved input validation to prevent apps from causing unexpected system termination or reading kernel memory.
6.6 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing malicious apps to escape their sandbox was addressed with enhanced restrictions in iOS 27, iPadOS 27, and macOS Golden Gate 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27 was fixed by improving bounds checking to prevent system termination or kernel memory exposure.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing an application to potentially escalate to root privileges was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by improving bounds checking to prevent unexpected system termination caused by remote attackers.
7.5 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could disclose kernel memory when connecting to a malicious SMB share, fixed by improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw in macOS Gatekeeper was resolved by enhancing state management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 to prevent malicious applications from bypassing security checks.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue in multiple Apple operating systems was fixed by enhancing the redaction of sensitive kernel memory information to prevent potential disclosure by applications.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability in specific macOS versions related to connecting to malicious WebDAV servers was fixed through improved validation to prevent potential code execution.
8.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authentication vulnerability allowing an app to cause unexpected system termination was fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.6.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability causing unexpected system termination was addressed through improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability causing unexpected system termination was addressed through enhanced memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed a snapshot handling vulnerability by enhancing permissions logic to prevent unauthorized app access to protected user data.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A validation issue in entitlement verification was fixed in specific macOS versions to prevent malicious applications from escaping their sandbox environment.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A parsing vulnerability in directory path handling that could expose sensitive user data was resolved through enhanced path validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed a security issue by enhancing Gatekeeper checks to prevent apps from bypassing these protections.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing unauthorized access to user-sensitive data was resolved through enhanced validation in Xcode 27 and macOS Golden Gate 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing potential memory corruption was addressed through enhanced bounds checking in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds access vulnerability causing potential system termination or kernel memory corruption has been addressed with enhanced bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A file quarantine bypass vulnerability allowing archives to circumvent Gatekeeper was fixed with additional checks across multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authentication vulnerability in multiple macOS versions allowed network attackers to access Screen Sharing without valid credentials, which was fixed by improving state management in updates including Golden Gate 27, Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1/26.7.
9.8 (Critical)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition causing unexpected system termination was resolved through enhanced state handling in macOS Golden Gate 27 and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability causing unexpected system termination was addressed through enhanced memory management in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue allowing apps to potentially access sensitive user data was resolved through enhanced validation checks in iOS 26.7+, iPadOS 26.7+, macOS Golden Gate 27, Sequoia 15.8, Tahoe 26.7, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability affecting multiple Apple OS versions was fixed to prevent malicious applications from bypassing Privacy preferences and gaining unauthorized access to state management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory initialization vulnerability allowing apps to infer kernel memory layout was addressed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and 15.8.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw allowing unauthorized app access to sensitive user data was resolved through enhanced validation in Apple’s iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use after free vulnerability in multiple Apple operating systems was fixed through enhanced memory management, preventing applications from causing unexpected system termination.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability was addressed by enhancing input validation across multiple OS versions, preventing applications from causing unexpected system termination.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A type confusion vulnerability causing denial of service was addressed by Apple through enhanced memory handling across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue causing unexpected system termination by an app was resolved through improved checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A null pointer dereference vulnerability causing potential denial-of-service during web content processing was fixed by improving input validation across multiple Apple operating systems.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability causing denial of service was addressed via enhanced input validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking, preventing remote attackers from causing application crashes or executing arbitrary code.
9.8 (Critical)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability allowing local users to cause unexpected system termination or read kernel memory has been fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 through enhanced validation.
8.1 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27 was fixed by improving input validation to prevent process memory disclosure from malicious files.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability in Apple operating systems including iOS, iPadOS, and macOS was addressed by enhancing bounds checking to prevent denial of service conditions.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing unauthorized app access to sensitive user data was addressed with enhanced restrictions in iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
4.7 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability causing unexpected process termination when opening malicious files has been fixed through improved size validation in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability allowing privilege escalation to root was addressed by enhanced bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability allowing arbitrary code execution with kernel privileges was addressed via improved memory management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition causing potential system termination or kernel memory corruption was resolved by enhancing state handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could cause unexpected system termination when connecting to a malicious SMB server, fixed by improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A heap buffer overflow vulnerability in iOS, iPadOS, and macOS could cause unexpected system termination when mounting a maliciously crafted volume, fixed by improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in asset catalog processing was fixed with improved bounds checking across multiple Apple operating systems including iOS 27, macOS variants, and others.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability causing system crashes or kernel memory corruption when mounting malicious disk images has been fixed in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Apple addressed a privacy vulnerability that allowed malicious apps to determine user location by enhancing private data redaction in log entries across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing unauthorized modification of protected file system areas was addressed through enhanced entitlement checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing potential kernel memory corruption when connecting to malicious SMB servers has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 through improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability causing potential app termination or memory disclosure was addressed through improved bounds checking in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability causing unexpected system termination was addressed via enhanced input validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue allowing malicious websites to detect installed apps was resolved by Apple through improved state management in Safari 27, iOS 27, iPadOS 27, and macOS Golden Gate 27.
4.3 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in multiple OS versions was fixed by enhancing bounds checking to prevent unexpected system termination when mounting disk images containing maliciously crafted files.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability in macOS Golden Gate 27 was fixed by enhancing size validation to prevent local attackers from causing system crashes or kernel memory corruption.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A use-after-free vulnerability causing unexpected system termination was addressed through enhanced memory management in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability in macOS Golden Gate 27 that could allow unauthorized access to sensitive user data was resolved through improved state management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability was fixed by enhancing bounds checking across multiple Apple operating systems, preventing apps from causing unexpected system termination or writing to kernel memory.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in font processing was addressed through improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, preventing unexpected application termination.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logging vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 that could expose user-sensitive data was resolved by implementing enhanced data redaction techniques.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed by improving bounds checking to prevent unexpected process termination when processing malicious 3D scenes.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Apple fixed a logging vulnerability that could expose sensitive user data by enhancing data redaction across multiple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An information disclosure vulnerability related to kernel memory was addressed by Apple through enhanced memory management across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability due to improper bounds checking in NTLM input processing has been fixed in iOS 27, iPadOS 27, and macOS Golden Gate 27, preventing unexpected application termination.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS was fixed by improving input validation to prevent process termination or memory disclosure.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A cryptographic vulnerability in Apple operating systems was addressed by enhancing integrity checks to prevent privileged network attackers from modifying network traffic in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A path handling vulnerability in Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7, 27, and 15.8 allowed attackers to write arbitrary files via malicious archive extraction and has been fixed.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing apps to escape their sandbox was resolved by enhancing state management in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer underflow vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could cause unexpected system termination when connecting to a malicious SMB server, fixed by improved input validation.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling flaw causing unexpected system termination or kernel memory corruption was resolved in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A remote denial-of-service vulnerability was addressed by enhancing input validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An input validation vulnerability allowing unauthorized access to restricted files has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 through enhanced input validation.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds access vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 related to SMB server connections has been fixed through enhanced bounds checking to prevent system crashes and kernel memory corruption.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 that could cause system crashes or kernel memory corruption when connecting to a malicious NFS server has been fixed via improved input validation.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing memory corruption when processing malicious 3D models has been fixed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability causing out-of-bounds reads in maliciously crafted documents was addressed via improved input validation in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could cause system crashes or kernel memory corruption when connecting to a malicious NFS server, fixed by improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability causing unexpected system termination was resolved through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw enabling apps to bypass network restrictions was resolved through enhanced validation in iOS 27, iPadOS 27, macOS Golden Gate 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling issue causing unexpected system termination was resolved in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A resource exhaustion vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by improving input validation to prevent remote denial-of-service attacks.
7.5 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by enhancing input validation to prevent denial-of-service attacks by privileged network attackers.
5.9 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization flaw allowing unauthorized access to sensitive user data was resolved through enhanced access control in macOS Golden Gate 27 and macOS Sequoia 15.8.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved through enhanced access control in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A double free vulnerability in macOS Golden Gate 27 was resolved by enhancing memory management to prevent unexpected system termination.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions validation flaw allowing unauthorized access to restricted files was resolved in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through enhanced validation mechanisms.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization flaw allowing potential unauthorized Bluetooth access was resolved by enhancing state management in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A double free vulnerability causing potential system termination or kernel memory corruption was resolved in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates through enhanced memory management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw causing unexpected system termination in certain macOS versions has been resolved through enhanced validation checks in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An uninitialized memory vulnerability in image processing was resolved across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates, preventing potential process memory disclosure.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability causing unexpected application termination when processing malicious disk images was addressed through improved bounds checking in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling vulnerability allowing local attackers to cause system termination or kernel memory corruption has been addressed in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory handling issue causing unexpected system termination was resolved in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A path traversal vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 allowed attackers controlling a network directory server to execute arbitrary code with root privileges, fixed by enhanced path validation.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed an access control vulnerability by implementing sandbox restrictions on system pasteboards to prevent unauthorized applications from accessing sensitive user data.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw allowing applications to bypass Gatekeeper checks was resolved through enhanced verification mechanisms in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability causing unexpected app termination when processing malicious images has been fixed with improved bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by enhancing bounds checking to prevent system termination or kernel memory exposure.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions bypass issue affecting macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was resolved by enhancing state management to enforce Privacy preferences.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing unexpected app termination when processing malicious files has been fixed with improved bounds checking across multiple Apple operating systems including iOS 27 and macOS variants.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An access issue in macOS Golden Gate 27 and macOS Tahoe 26.7 allowed an app to potentially bypass sandbox restrictions, which was addressed by implementing additional sandbox constraints.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw enabling an application to escape its sandbox was resolved through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing an application to escape its sandbox environment was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A buffer overflow vulnerability causing system crashes or kernel memory corruption when mounting malicious disk images has been fixed in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through improved bounds checking.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions issue allowing local apps to read a persistent account identifier was fixed by adding restrictions across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Improved handling of symbolic links in macOS Golden Gate 27 prevents applications from escaping their sandbox environment, enhancing system security.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed a permissions vulnerability that allowed applications to access local network devices without user consent by enhancing state management controls.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An information disclosure vulnerability in macOS Golden Gate 27 and watchOS 27 was resolved by improving state management to prevent malicious applications from leaking sensitive user information.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing unauthorized app access to protected user data was resolved with enhanced restrictions in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability in macOS Golden Gate 27 was addressed by removing vulnerable code that could cause system crashes or kernel memory corruption when mounting malicious disk images.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed a permissions vulnerability that allowed an application to modify Privacy preferences by implementing additional restrictions.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in font processing that could disclose process memory has been fixed with enhanced bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in font processing was addressed by Apple through enhanced input validation across iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27, preventing potential memory disclosure.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability in Apple operating systems allowed malicious shortcuts to send messages without user confirmation, fixed via improved state management in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions issue in macOS Golden Gate 27 allowed apps to bypass Apple Intelligence security prompts, which was resolved through improved state management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A type confusion vulnerability causing unexpected system termination was addressed through enhanced checks in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Apple has resolved a privacy vulnerability in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 that previously allowed apps to identify users across reinstalls by improving identifier management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability was fixed through improved state management across multiple OS versions, preventing sandboxed applications from executing arbitrary code with kernel privileges.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing applications to modify protected system files was resolved via enhanced path validation across multiple Apple operating systems including iOS 27, macOS variants, and others.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing memory corruption when processing malicious 3D models has been fixed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
7.3 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing unauthorized access to persistent device identifiers was resolved across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and 15.8.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A type confusion vulnerability causing potential unexpected system termination was fixed by improving memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and 15.8.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing unauthorized access to sensitive user data was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, and tvOS versions 26.7, 27, and 15.8.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions validation issue allowing unauthorized app access to sensitive user data was resolved in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing potential system termination or kernel memory corruption was addressed through enhanced bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An integer overflow vulnerability causing memory corruption when processing malicious 3D models was fixed via improved input validation in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory initialization vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27 allowed apps with root privileges to read uninitialized kernel memory and has been fixed.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing sandboxed applications to access restricted files was resolved via enhanced path validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7, 27, and related releases.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Apple fixed a permissions vulnerability that allowed apps to fingerprint users by implementing additional sandbox restrictions across iOS 27, iPadOS 27, macOS Golden Gate 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An information disclosure vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed by improving state management to prevent apps from identifying other installed applications.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization vulnerability allowing sandboxed applications to access the System Keychain was resolved by enhancing state management in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
4.7 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed a security flaw by implementing additional entitlement checks to prevent applications from gaining unauthorized root privileges.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability in multiple Apple operating systems was addressed by enhancing memory handling when processing maliciously crafted 3D models in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic issue in state management was fixed across multiple Apple operating systems to prevent unexpected process termination triggered by malicious web content.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability causing unexpected application termination when processing malicious images was addressed through improved bounds checking in iOS 26.7, iPadOS 26.7, and macOS Golden Gate 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A heap buffer overflow vulnerability causing unexpected app termination when processing malicious files has been fixed with improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, visionOS, and watchOS versions 26.7 and 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability was addressed by enhancing bounds checking to prevent sandboxed processes from bypassing sandbox restrictions across multiple operating system versions.
5.2 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Apple implemented an improved certificate validation fix across multiple operating systems to prevent attackers with compromised intermediate certificate authorities from issuing certificates with arbitrary extended key usages.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in multiple Apple OS versions was fixed by enhancing bounds checking to prevent unexpected process termination caused by maliciously crafted images.
6.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing unauthorized app access to sensitive user data was addressed with enhanced restrictions in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing local applications to read a persistent account identifier was resolved with enhanced restrictions across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An improved certificate validation fix in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 addresses a vulnerability that could allow an attacker in a privileged network position to intercept network traffic.
4.8 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An authorization issue allowing unauthorized app access to Bluetooth device information was resolved through improved state management in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, and watchOS 27.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An issue in macOS Golden Gate 27 that allowed applications to escape their sandbox was resolved through enhanced validation checks.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
Additional entitlement checks were implemented in Safari 27, iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, and visionOS 27 to prevent apps from potentially accessing sensitive user data.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic issue in Safari 27, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 was fixed by improving state management to prevent universal cross-site scripting triggered by maliciously crafted webarchive files.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability in macOS Golden Gate 27 related to mounting a maliciously crafted exFAT volume was fixed by improving input validation to prevent system crashes and kernel memory leaks.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds write vulnerability in macOS Golden Gate 27 related to mounting malicious exFAT volumes has been fixed by implementing improved bounds checking to prevent system crashes and kernel memory leaks.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A directory path parsing vulnerability allowing unauthorized access to sensitive user data was resolved through enhanced path validation in macOS Golden Gate 27 and macOS Sonoma 14.8.8.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
An out-of-bounds read vulnerability allowing disclosure of kernel memory was addressed via improved input validation in multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A vulnerability allowing an app to delete credentials stored in Keychain was resolved by removing the vulnerable code in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27.
5.5 (Medium)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A logic flaw in macOS Golden Gate 27 allowed applications to bypass Gatekeeper checks, which was resolved by enhancing state management within the system.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing potential unauthorized access to restricted files was resolved by enhancing path validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
macOS Golden Gate 27 addressed a security issue where a malicious application could bypass clickjacking protections for secure prompts by implementing improved state management.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A permissions vulnerability allowing apps to gain root privileges was addressed with enhanced restrictions in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.
7.8 (High)
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
A memory corruption vulnerability due to insufficient input validation, causing potential unexpected system termination when connecting a malicious accessory, has been fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, and macOS Tahoe 26.7.
Affected products
Known affected
4 products, the same list as for
CVE-2022-3437
References
226 references
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Apple heeft meerdere kwetsbaarheden verholpen in macOS (Specifiek voor Golden Gate 27, Sequoia 15.8, Tahoe 26.7).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in macOS betreffen onder andere heap-based buffer overflows, use-after-free fouten, integer overflows, null pointer dereferences, onjuiste toegangscontrole, privilege escalatie, race conditions, out-of-bounds reads en writes, loggingsproblemen, en problemen met state management. Deze kunnen leiden tot onverwachte systeem- of applicatie-terminaties, kernel geheugen corruptie, ongeautoriseerde toegang tot gevoelige gebruikersdata, omzeilen van sandbox- en Gatekeeper-beveiligingen, en het mogelijk maken van remote code execution of denial-of-service.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Handling of Insufficient Permissions or Privileges",
"title": "CWE-280"
},
{
"category": "general",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "User Interface (UI) Misrepresentation of Critical Information",
"title": "CWE-451"
},
{
"category": "general",
"text": "External Control of Critical State Data",
"title": "CWE-642"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://support.apple.com/en-us/149035"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.apple.com/en-us/149042"
},
{
"category": "external",
"summary": "Reference",
"url": "https://support.apple.com/en-us/149043"
}
],
"title": "Kwetsbaarheden verholpen in Apple macOS en Samba door Apple en Samba",
"tracking": {
"current_release_date": "2026-09-15T15:41:43.748074Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0371",
"initial_release_date": "2026-09-15T15:41:43.748074Z",
"revision_history": [
{
"date": "2026-09-15T15:41:43.748074Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "macOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "macOS Golden Gate"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "macOS Sequoia"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-4"
}
}
],
"category": "product_name",
"name": "macOS Tahoe"
}
],
"category": "vendor",
"name": "Apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-3437",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "description",
"text": "Multiple updates to Samba (versions 4.15.9 through 4.15.13) and Libheimdal (7.8.0) address critical security vulnerabilities including heap-based buffer overflows, use-after-free bugs, integer overflows, information disclosure, and Active Directory password bypasses.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2022-3437 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2022/cve-2022-3437.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2022-3437"
},
{
"cve": "CVE-2026-20683",
"notes": [
{
"category": "description",
"text": "An authentication vulnerability in the Sign In With Apple flow was resolved by enhancing state management across iOS 27, iPadOS 27, and multiple macOS versions to prevent unauthorized access to user Apple accounts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-20683 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-20683.json"
}
],
"title": "CVE-2026-20683"
},
{
"cve": "CVE-2026-28899",
"notes": [
{
"category": "description",
"text": "A logic flaw allowing applications to bypass Gatekeeper checks was resolved through enhanced verification in macOS versions Golden Gate 27, Sequoia 15.8, Tahoe 26.6, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28899 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28899.json"
}
],
"title": "CVE-2026-28899"
},
{
"cve": "CVE-2026-28930",
"notes": [
{
"category": "description",
"text": "macOS Tahoe 26.5 addressed a permissions vulnerability by implementing additional restrictions to prevent unauthorized app access to protected user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28930 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28930.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-28930"
},
{
"cve": "CVE-2026-28934",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability causing unexpected system termination when mounting malicious disk images has been fixed in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28934 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28934.json"
}
],
"title": "CVE-2026-28934"
},
{
"cve": "CVE-2026-28935",
"notes": [
{
"category": "description",
"text": "A memory handling flaw causing unexpected system termination or kernel memory corruption was resolved in iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28935 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28935.json"
}
],
"title": "CVE-2026-28935"
},
{
"cve": "CVE-2026-28937",
"notes": [
{
"category": "description",
"text": "An issue allowing an app to access sensitive user data was addressed by improving state management and resolved in macOS Golden Gate 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28937 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28937.json"
}
],
"title": "CVE-2026-28937"
},
{
"cve": "CVE-2026-28966",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing unexpected app termination was addressed through improved bounds checking in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28966 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28966.json"
}
],
"title": "CVE-2026-28966"
},
{
"cve": "CVE-2026-28968",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing potential system termination or kernel memory corruption was addressed by Apple through enhanced bounds checking in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28968 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28968.json"
}
],
"title": "CVE-2026-28968"
},
{
"cve": "CVE-2026-28969",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "A use after free vulnerability affecting multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed to prevent apps from causing unexpected system termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-28969 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-28969.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-28969"
},
{
"cve": "CVE-2026-34979",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "OpenPrinting CUPS versions 2.4.16 and earlier contain multiple vulnerabilities including a heap-based buffer overflow in the scheduler\u0027s get_options() function, authorization bypass, path traversal, unauthorized code execution, and denial of service issues.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34979 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34979.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-34979"
},
{
"cve": "CVE-2026-43664",
"notes": [
{
"category": "description",
"text": "An app vulnerability allowing potential access to sensitive user data was addressed with enhanced data protection across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and watchOS versions 26.7 through 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43664 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43664.json"
}
],
"title": "CVE-2026-43664"
},
{
"cve": "CVE-2026-43677",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing unexpected application termination when connecting to a malicious WebDAV server was fixed by removing the vulnerable code in specific macOS versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43677 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43677.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43677"
},
{
"cve": "CVE-2026-43683",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability causing potential process termination or memory disclosure was addressed through enhanced bounds checking in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43683 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43683.json"
}
],
"title": "CVE-2026-43683"
},
{
"cve": "CVE-2026-43684",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability causing potential system termination or kernel memory corruption was addressed via improved memory management in iOS 26.7, iPadOS 26.7, macOS Golden Gate 27, and macOS Sequoia 15.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43684 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43684.json"
}
],
"title": "CVE-2026-43684"
},
{
"cve": "CVE-2026-43686",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "A use-after-free vulnerability causing kernel memory corruption when connecting to malicious NFS servers was fixed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43686 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43686.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43686"
},
{
"cve": "CVE-2026-43687",
"notes": [
{
"category": "description",
"text": "Apple fixed a kernel memory disclosure vulnerability related to malicious NFS server connections across multiple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43687 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43687.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43687"
},
{
"cve": "CVE-2026-43688",
"notes": [
{
"category": "description",
"text": "A memory corruption vulnerability causing unexpected app termination via malicious files was fixed by improved input validation in iOS 27, iPadOS 27, and macOS Golden Gate 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43688 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43688.json"
}
],
"title": "CVE-2026-43688"
},
{
"cve": "CVE-2026-43689",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "description",
"text": "A permissions vulnerability allowing malicious apps to gain root privileges was addressed with enhanced restrictions in iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, and visionOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43689 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43689.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43689"
},
{
"cve": "CVE-2026-43690",
"notes": [
{
"category": "description",
"text": "A race condition vulnerability allowing local users to read kernel memory was resolved through enhanced locking mechanisms in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43690 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43690.json"
}
],
"title": "CVE-2026-43690"
},
{
"cve": "CVE-2026-43691",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "A path handling vulnerability allowing privilege escalation to root was addressed through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43691 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43691.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43691"
},
{
"cve": "CVE-2026-43692",
"notes": [
{
"category": "description",
"text": "A validation flaw in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was resolved by enhancing input sanitization to prevent remote exploitation leading to app termination or arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43692 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43692.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43692"
},
{
"cve": "CVE-2026-43695",
"notes": [
{
"category": "description",
"text": "An authorization flaw allowing potential exposure of sensitive user data was addressed through enhanced state management across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43695 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43695.json"
}
],
"title": "CVE-2026-43695"
},
{
"cve": "CVE-2026-43696",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability in macOS Golden Gate 27 allowed unauthorized capture of Touch Bar content, which was resolved by enhancing entitlement checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43696 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43696.json"
}
],
"title": "CVE-2026-43696"
},
{
"cve": "CVE-2026-43697",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by enhancing bounds checking during the processing of maliciously crafted 3D files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43697 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43697.json"
}
],
"title": "CVE-2026-43697"
},
{
"cve": "CVE-2026-43698",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"title": "CWE-88"
},
{
"category": "description",
"text": "An injection vulnerability allowing an application to gain root privileges was addressed through improved validation in multiple macOS versions including Golden Gate 27, Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43698 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43698.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43698"
},
{
"cve": "CVE-2026-43702",
"notes": [
{
"category": "description",
"text": "A memory handling vulnerability causing potential app termination or memory corruption when processing malicious video files has been resolved in multiple Apple OS versions including iOS, iPadOS, macOS, tvOS, and watchOS 26.6 and 26.7 releases.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43702 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43702.json"
}
],
"title": "CVE-2026-43702"
},
{
"cve": "CVE-2026-43719",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 that could cause system termination when mounting a malicious SMB share was fixed by improving memory management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43719 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43719.json"
}
],
"title": "CVE-2026-43719"
},
{
"cve": "CVE-2026-43737",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability allowing unauthorized access to motion data from headphones without user consent was resolved through enhanced validation across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and watchOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43737 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43737.json"
}
],
"title": "CVE-2026-43737"
},
{
"cve": "CVE-2026-43738",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "A memory handling vulnerability causing potential process memory disclosure via malicious asset catalogs was fixed in iOS 18.7.10, iPadOS 18.7.10, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, and macOS Sonoma 14.8.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43738 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43738.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43738"
},
{
"cve": "CVE-2026-43741",
"notes": [
{
"category": "description",
"text": "A logic flaw in state management allowing unauthorized access to protected user data was resolved in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43741 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43741.json"
}
],
"title": "CVE-2026-43741"
},
{
"cve": "CVE-2026-43743",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "A race condition was resolved through improved state handling across multiple Apple operating systems, preventing applications from causing unexpected system termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43743 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43743.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43743"
},
{
"cve": "CVE-2026-43760",
"notes": [
{
"category": "description",
"text": "An access control vulnerability allowing applications to access user-sensitive data was addressed through enhanced restrictions in macOS Sonoma 14.8.8 and macOS Tahoe versions 26.6 and 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43760 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43760.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43760"
},
{
"cve": "CVE-2026-43763",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing applications to read files outside their sandbox was resolved by removing vulnerable code in macOS Sequoia 15.7.8, 15.8, Sonoma 14.8.8, and Tahoe 26.6, 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43763 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43763.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43763"
},
{
"cve": "CVE-2026-43785",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability in Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 allowed applications to modify files despite having only read access, which has been fixed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43785 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43785.json"
}
],
"title": "CVE-2026-43785"
},
{
"cve": "CVE-2026-43786",
"cwe": {
"id": "CWE-280",
"name": "Improper Handling of Insufficient Permissions or Privileges"
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Insufficient Permissions or Privileges",
"title": "CWE-280"
},
{
"category": "description",
"text": "A vulnerability allowing an application to potentially escalate to root privileges was addressed through enhanced entitlement checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43786 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43786.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-43786"
},
{
"cve": "CVE-2026-43787",
"notes": [
{
"category": "description",
"text": "A logic flaw allowing privileged network attackers to leak sensitive user data was resolved through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43787 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43787.json"
}
],
"title": "CVE-2026-43787"
},
{
"cve": "CVE-2026-43788",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability in macOS Golden Gate 27 was addressed by enhancing input validation to prevent denial-of-service attacks and potential memory disclosure from maliciously crafted files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43788 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43788.json"
}
],
"title": "CVE-2026-43788"
},
{
"cve": "CVE-2026-43789",
"notes": [
{
"category": "description",
"text": "An access control vulnerability allowing applications to potentially access user-sensitive data was addressed by implementing additional sandbox restrictions in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43789 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43789.json"
}
],
"title": "CVE-2026-43789"
},
{
"cve": "CVE-2026-43790",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing remote attacks to cause system termination or kernel memory corruption was addressed by enhanced memory handling in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43790 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43790.json"
}
],
"title": "CVE-2026-43790"
},
{
"cve": "CVE-2026-43791",
"notes": [
{
"category": "description",
"text": "A validation flaw allowing arbitrary file reading by an app was resolved via enhanced input sanitization in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-43791 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-43791.json"
}
],
"title": "CVE-2026-43791"
},
{
"cve": "CVE-2026-64712",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing an application to potentially escalate to root privileges was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64712 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64712.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64712"
},
{
"cve": "CVE-2026-64714",
"notes": [
{
"category": "description",
"text": "A memory corruption vulnerability causing denial-of-service via malicious image processing was addressed with enhanced bounds checking in iOS 18.7.10, iPadOS 18.7.10, and multiple macOS versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64714 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64714.json"
}
],
"title": "CVE-2026-64714"
},
{
"cve": "CVE-2026-64718",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "A use-after-free vulnerability in Safari and related Apple OS versions was fixed by improving memory management to prevent crashes caused by maliciously crafted web content.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64718 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64718.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64718"
},
{
"cve": "CVE-2026-64736",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds access vulnerability causing potential system termination or kernel memory corruption was addressed with enhanced bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64736 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64736.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64736"
},
{
"cve": "CVE-2026-64752",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A memory corruption vulnerability enabling arbitrary code execution via crafted images was resolved by removing vulnerable code in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64752 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64752.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64752"
},
{
"cve": "CVE-2026-64753",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability in Safari 27 and related OS versions was fixed by removing vulnerable code that could lead to the disclosure of sensitive user information from maliciously crafted web content.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64753 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64753.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64753"
},
{
"cve": "CVE-2026-64756",
"notes": [
{
"category": "description",
"text": "A path handling vulnerability allowing unauthorized access to user-sensitive data was addressed through enhanced validation in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64756 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64756.json"
}
],
"title": "CVE-2026-64756"
},
{
"cve": "CVE-2026-64758",
"notes": [
{
"category": "description",
"text": "An issue causing unexpected application termination when processing maliciously crafted files was resolved through improved bounds checks in multiple Apple operating systems version 26.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64758 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64758.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64758"
},
{
"cve": "CVE-2026-64760",
"notes": [
{
"category": "description",
"text": "An information leakage vulnerability allowing apps to leak sensitive kernel state was addressed with additional validation in multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, tvOS, visionOS, and watchOS versions 18.7.10 and 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64760 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64760.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-64760"
},
{
"cve": "CVE-2026-64790",
"notes": [
{
"category": "description",
"text": "A path handling vulnerability allowing privilege escalation was addressed through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-64790 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-64790.json"
}
],
"title": "CVE-2026-64790"
},
{
"cve": "CVE-2026-65330",
"notes": [
{
"category": "description",
"text": "An issue causing potential unexpected system termination or kernel memory corruption was resolved through improved memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65330 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65330.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65330"
},
{
"cve": "CVE-2026-65339",
"notes": [
{
"category": "description",
"text": "A logic issue was fixed with enhanced checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS to prevent apps from potentially leaking sensitive user information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65339 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65339.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65339"
},
{
"cve": "CVE-2026-65342",
"notes": [
{
"category": "description",
"text": "A permissions issue allowing an app to access sensitive user data was resolved through improved validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65342 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65342.json"
}
],
"title": "CVE-2026-65342"
},
{
"cve": "CVE-2026-65344",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7 and 27 was addressed by improved bounds checking to prevent unexpected app termination from malicious video files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65344 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65344.json"
}
],
"title": "CVE-2026-65344"
},
{
"cve": "CVE-2026-65345",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing unauthorized app access to user-sensitive data was addressed with enhanced restrictions in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65345 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65345.json"
}
],
"title": "CVE-2026-65345"
},
{
"cve": "CVE-2026-65346",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "An integer overflow vulnerability in image processing, fixed by improved input validation, could lead to arbitrary code execution across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65346 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65346.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65346"
},
{
"cve": "CVE-2026-65348",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing unauthorized modification of protected file system areas was resolved in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65348 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65348.json"
}
],
"title": "CVE-2026-65348"
},
{
"cve": "CVE-2026-65349",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "An out-of-bounds read vulnerability affecting multiple Apple operating systems was fixed through improved input validation to prevent apps from causing unexpected system termination or reading kernel memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65349 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65349.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65349"
},
{
"cve": "CVE-2026-65354",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing malicious apps to escape their sandbox was addressed with enhanced restrictions in iOS 27, iPadOS 27, and macOS Golden Gate 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65354 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65354.json"
}
],
"title": "CVE-2026-65354"
},
{
"cve": "CVE-2026-65358",
"notes": [
{
"category": "description",
"text": "A race condition causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65358 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65358.json"
}
],
"title": "CVE-2026-65358"
},
{
"cve": "CVE-2026-65359",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27 was fixed by improving bounds checking to prevent system termination or kernel memory exposure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65359 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65359.json"
}
],
"title": "CVE-2026-65359"
},
{
"cve": "CVE-2026-65360",
"notes": [
{
"category": "description",
"text": "A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65360 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65360.json"
}
],
"title": "CVE-2026-65360"
},
{
"cve": "CVE-2026-65361",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65361 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65361.json"
}
],
"title": "CVE-2026-65361"
},
{
"cve": "CVE-2026-65362",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing an application to potentially escalate to root privileges was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65362 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65362.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65362"
},
{
"cve": "CVE-2026-65364",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by improving bounds checking to prevent unexpected system termination caused by remote attackers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65364 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65364.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65364"
},
{
"cve": "CVE-2026-65365",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could disclose kernel memory when connecting to a malicious SMB share, fixed by improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65365 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65365.json"
}
],
"title": "CVE-2026-65365"
},
{
"cve": "CVE-2026-65369",
"notes": [
{
"category": "description",
"text": "A logic flaw in macOS Gatekeeper was resolved by enhancing state management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 to prevent malicious applications from bypassing security checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65369 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65369.json"
}
],
"title": "CVE-2026-65369"
},
{
"cve": "CVE-2026-65371",
"notes": [
{
"category": "description",
"text": "An issue in multiple Apple operating systems was fixed by enhancing the redaction of sensitive kernel memory information to prevent potential disclosure by applications.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65371 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65371.json"
}
],
"title": "CVE-2026-65371"
},
{
"cve": "CVE-2026-65374",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A memory corruption vulnerability in specific macOS versions related to connecting to malicious WebDAV servers was fixed through improved validation to prevent potential code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65374 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65374.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65374"
},
{
"cve": "CVE-2026-65375",
"notes": [
{
"category": "description",
"text": "An authentication vulnerability allowing an app to cause unexpected system termination was fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65375 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65375.json"
}
],
"title": "CVE-2026-65375"
},
{
"cve": "CVE-2026-65376",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability causing unexpected system termination was addressed through improved bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65376 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65376.json"
}
],
"title": "CVE-2026-65376"
},
{
"cve": "CVE-2026-65377",
"notes": [
{
"category": "description",
"text": "A memory corruption vulnerability causing unexpected system termination was addressed through enhanced memory handling in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65377 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65377.json"
}
],
"title": "CVE-2026-65377"
},
{
"cve": "CVE-2026-65378",
"notes": [
{
"category": "description",
"text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65378 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65378.json"
}
],
"title": "CVE-2026-65378"
},
{
"cve": "CVE-2026-65380",
"notes": [
{
"category": "description",
"text": "macOS Golden Gate 27 addressed a snapshot handling vulnerability by enhancing permissions logic to prevent unauthorized app access to protected user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65380 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65380.json"
}
],
"title": "CVE-2026-65380"
},
{
"cve": "CVE-2026-65381",
"notes": [
{
"category": "description",
"text": "A validation issue in entitlement verification was fixed in specific macOS versions to prevent malicious applications from escaping their sandbox environment.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65381 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65381.json"
}
],
"title": "CVE-2026-65381"
},
{
"cve": "CVE-2026-65382",
"notes": [
{
"category": "description",
"text": "A parsing vulnerability in directory path handling that could expose sensitive user data was resolved through enhanced path validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65382 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65382.json"
}
],
"title": "CVE-2026-65382"
},
{
"cve": "CVE-2026-65383",
"notes": [
{
"category": "description",
"text": "macOS Golden Gate 27 addressed a security issue by enhancing Gatekeeper checks to prevent apps from bypassing these protections.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65383 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65383.json"
}
],
"title": "CVE-2026-65383"
},
{
"cve": "CVE-2026-65393",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing unauthorized access to user-sensitive data was resolved through enhanced validation in Xcode 27 and macOS Golden Gate 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65393 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65393.json"
}
],
"title": "CVE-2026-65393"
},
{
"cve": "CVE-2026-65395",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing potential memory corruption was addressed through enhanced bounds checking in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65395 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65395.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65395"
},
{
"cve": "CVE-2026-65398",
"notes": [
{
"category": "description",
"text": "An out-of-bounds access vulnerability causing potential system termination or kernel memory corruption has been addressed with enhanced bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65398 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65398.json"
}
],
"title": "CVE-2026-65398"
},
{
"cve": "CVE-2026-65399",
"notes": [
{
"category": "description",
"text": "A file quarantine bypass vulnerability allowing archives to circumvent Gatekeeper was fixed with additional checks across multiple Apple operating systems including iOS, iPadOS, macOS, visionOS, and watchOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65399 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65399.json"
}
],
"title": "CVE-2026-65399"
},
{
"cve": "CVE-2026-65400",
"notes": [
{
"category": "description",
"text": "An authentication vulnerability in multiple macOS versions allowed network attackers to access Screen Sharing without valid credentials, which was fixed by improving state management in updates including Golden Gate 27, Sequoia 15.7.9, Sonoma 14.8.9, and Tahoe 26.6.1/26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65400 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65400.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65400"
},
{
"cve": "CVE-2026-65401",
"notes": [
{
"category": "description",
"text": "A race condition causing unexpected system termination was resolved through enhanced state handling in macOS Golden Gate 27 and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65401 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65401.json"
}
],
"title": "CVE-2026-65401"
},
{
"cve": "CVE-2026-65402",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability causing unexpected system termination was addressed through enhanced memory management in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65402 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65402.json"
}
],
"title": "CVE-2026-65402"
},
{
"cve": "CVE-2026-65403",
"notes": [
{
"category": "description",
"text": "An issue allowing apps to potentially access sensitive user data was resolved through enhanced validation checks in iOS 26.7+, iPadOS 26.7+, macOS Golden Gate 27, Sequoia 15.8, Tahoe 26.7, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65403 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65403.json"
}
],
"title": "CVE-2026-65403"
},
{
"cve": "CVE-2026-65404",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability affecting multiple Apple OS versions was fixed to prevent malicious applications from bypassing Privacy preferences and gaining unauthorized access to state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65404 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65404.json"
}
],
"title": "CVE-2026-65404"
},
{
"cve": "CVE-2026-65405",
"notes": [
{
"category": "description",
"text": "A memory initialization vulnerability allowing apps to infer kernel memory layout was addressed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and 15.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65405 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65405.json"
}
],
"title": "CVE-2026-65405"
},
{
"cve": "CVE-2026-65406",
"notes": [
{
"category": "description",
"text": "A logic flaw allowing unauthorized app access to sensitive user data was resolved through enhanced validation in Apple\u2019s iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65406 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65406.json"
}
],
"title": "CVE-2026-65406"
},
{
"cve": "CVE-2026-65407",
"notes": [
{
"category": "description",
"text": "A use after free vulnerability in multiple Apple operating systems was fixed through enhanced memory management, preventing applications from causing unexpected system termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65407 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65407.json"
}
],
"title": "CVE-2026-65407"
},
{
"cve": "CVE-2026-65408",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability was addressed by enhancing input validation across multiple OS versions, preventing applications from causing unexpected system termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65408 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65408.json"
}
],
"title": "CVE-2026-65408"
},
{
"cve": "CVE-2026-65409",
"notes": [
{
"category": "description",
"text": "A type confusion vulnerability causing denial of service was addressed by Apple through enhanced memory handling across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65409 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65409.json"
}
],
"title": "CVE-2026-65409"
},
{
"cve": "CVE-2026-65410",
"notes": [
{
"category": "description",
"text": "An issue causing unexpected system termination by an app was resolved through improved checks across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65410 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65410.json"
}
],
"title": "CVE-2026-65410"
},
{
"cve": "CVE-2026-65412",
"notes": [
{
"category": "description",
"text": "A null pointer dereference vulnerability causing potential denial-of-service during web content processing was fixed by improving input validation across multiple Apple operating systems.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65412 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65412.json"
}
],
"title": "CVE-2026-65412"
},
{
"cve": "CVE-2026-65413",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability causing denial of service was addressed via enhanced input validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65413 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65413.json"
}
],
"title": "CVE-2026-65413"
},
{
"cve": "CVE-2026-65414",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability in multiple Apple operating systems was addressed by enhancing bounds checking, preventing remote attackers from causing application crashes or executing arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65414 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65414.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65414"
},
{
"cve": "CVE-2026-65415",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "A race condition vulnerability allowing local users to cause unexpected system termination or read kernel memory has been fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27 through enhanced validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-65415 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-65415.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-65415"
},
{
"cve": "CVE-2026-84487",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27 was fixed by improving input validation to prevent process memory disclosure from malicious files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84487 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84487.json"
}
],
"title": "CVE-2026-84487"
},
{
"cve": "CVE-2026-84489",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
},
{
"category": "description",
"text": "A buffer overflow vulnerability in Apple operating systems including iOS, iPadOS, and macOS was addressed by enhancing bounds checking to prevent denial of service conditions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84489 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84489.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84489"
},
{
"cve": "CVE-2026-84491",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing unauthorized app access to sensitive user data was addressed with enhanced restrictions in iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84491 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84491.json"
}
],
"title": "CVE-2026-84491"
},
{
"cve": "CVE-2026-84492",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84492 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84492.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84492"
},
{
"cve": "CVE-2026-84497",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability causing unexpected process termination when opening malicious files has been fixed through improved size validation in Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84497 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84497.json"
}
],
"title": "CVE-2026-84497"
},
{
"cve": "CVE-2026-84505",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability allowing privilege escalation to root was addressed by enhanced bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84505 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84505.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84505"
},
{
"cve": "CVE-2026-84506",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "description",
"text": "A use-after-free vulnerability allowing arbitrary code execution with kernel privileges was addressed via improved memory management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84506 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84506.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84506"
},
{
"cve": "CVE-2026-84507",
"notes": [
{
"category": "description",
"text": "A race condition causing potential system termination or kernel memory corruption was resolved by enhancing state handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84507 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84507.json"
}
],
"title": "CVE-2026-84507"
},
{
"cve": "CVE-2026-84509",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could cause unexpected system termination when connecting to a malicious SMB server, fixed by improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84509 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84509.json"
}
],
"title": "CVE-2026-84509"
},
{
"cve": "CVE-2026-84510",
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability in iOS, iPadOS, and macOS could cause unexpected system termination when mounting a maliciously crafted volume, fixed by improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84510 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84510.json"
}
],
"title": "CVE-2026-84510"
},
{
"cve": "CVE-2026-84511",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability in asset catalog processing was fixed with improved bounds checking across multiple Apple operating systems including iOS 27, macOS variants, and others.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84511 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84511.json"
}
],
"title": "CVE-2026-84511"
},
{
"cve": "CVE-2026-84512",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability causing system crashes or kernel memory corruption when mounting malicious disk images has been fixed in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84512 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84512.json"
}
],
"title": "CVE-2026-84512"
},
{
"cve": "CVE-2026-84513",
"notes": [
{
"category": "description",
"text": "Apple addressed a privacy vulnerability that allowed malicious apps to determine user location by enhancing private data redaction in log entries across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84513 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84513.json"
}
],
"title": "CVE-2026-84513"
},
{
"cve": "CVE-2026-84514",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing unauthorized modification of protected file system areas was addressed through enhanced entitlement checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84514 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84514.json"
}
],
"title": "CVE-2026-84514"
},
{
"cve": "CVE-2026-84515",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing potential kernel memory corruption when connecting to malicious SMB servers has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84515 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84515.json"
}
],
"title": "CVE-2026-84515"
},
{
"cve": "CVE-2026-84516",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability causing potential app termination or memory disclosure was addressed through improved bounds checking in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84516 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84516.json"
}
],
"title": "CVE-2026-84516"
},
{
"cve": "CVE-2026-84517",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability causing unexpected system termination was addressed via enhanced input validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84517 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84517.json"
}
],
"title": "CVE-2026-84517"
},
{
"cve": "CVE-2026-84518",
"cwe": {
"id": "CWE-642",
"name": "External Control of Critical State Data"
},
"notes": [
{
"category": "other",
"text": "External Control of Critical State Data",
"title": "CWE-642"
},
{
"category": "description",
"text": "An issue allowing malicious websites to detect installed apps was resolved by Apple through improved state management in Safari 27, iOS 27, iPadOS 27, and macOS Golden Gate 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84518 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84518.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84518"
},
{
"cve": "CVE-2026-84519",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability in multiple OS versions was fixed by enhancing bounds checking to prevent unexpected system termination when mounting disk images containing maliciously crafted files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84519 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84519.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84519"
},
{
"cve": "CVE-2026-84520",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability in macOS Golden Gate 27 was fixed by enhancing size validation to prevent local attackers from causing system crashes or kernel memory corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84520 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84520.json"
}
],
"title": "CVE-2026-84520"
},
{
"cve": "CVE-2026-84521",
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability causing unexpected system termination was addressed through enhanced memory management in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84521 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84521.json"
}
],
"title": "CVE-2026-84521"
},
{
"cve": "CVE-2026-84522",
"notes": [
{
"category": "description",
"text": "A race condition vulnerability in macOS Golden Gate 27 that could allow unauthorized access to sensitive user data was resolved through improved state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84522 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84522.json"
}
],
"title": "CVE-2026-84522"
},
{
"cve": "CVE-2026-84523",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability was fixed by enhancing bounds checking across multiple Apple operating systems, preventing apps from causing unexpected system termination or writing to kernel memory.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84523 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84523.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84523"
},
{
"cve": "CVE-2026-84524",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in font processing was addressed through improved bounds checking across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, preventing unexpected application termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84524 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84524.json"
}
],
"title": "CVE-2026-84524"
},
{
"cve": "CVE-2026-84525",
"notes": [
{
"category": "description",
"text": "A logging vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 that could expose user-sensitive data was resolved by implementing enhanced data redaction techniques.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84525 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84525.json"
}
],
"title": "CVE-2026-84525"
},
{
"cve": "CVE-2026-84526",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was fixed by improving bounds checking to prevent unexpected process termination when processing malicious 3D scenes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84526 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84526.json"
}
],
"title": "CVE-2026-84526"
},
{
"cve": "CVE-2026-84527",
"notes": [
{
"category": "description",
"text": "Apple fixed a logging vulnerability that could expose sensitive user data by enhancing data redaction across multiple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84527 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84527.json"
}
],
"title": "CVE-2026-84527"
},
{
"cve": "CVE-2026-84530",
"notes": [
{
"category": "description",
"text": "An information disclosure vulnerability related to kernel memory was addressed by Apple through enhanced memory management across iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84530 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84530.json"
}
],
"title": "CVE-2026-84530"
},
{
"cve": "CVE-2026-84531",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability due to improper bounds checking in NTLM input processing has been fixed in iOS 27, iPadOS 27, and macOS Golden Gate 27, preventing unexpected application termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84531 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84531.json"
}
],
"title": "CVE-2026-84531"
},
{
"cve": "CVE-2026-84532",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and visionOS was fixed by improving input validation to prevent process termination or memory disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84532 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84532.json"
}
],
"title": "CVE-2026-84532"
},
{
"cve": "CVE-2026-84533",
"notes": [
{
"category": "description",
"text": "A cryptographic vulnerability in Apple operating systems was addressed by enhancing integrity checks to prevent privileged network attackers from modifying network traffic in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84533 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84533.json"
}
],
"title": "CVE-2026-84533"
},
{
"cve": "CVE-2026-84534",
"notes": [
{
"category": "description",
"text": "A path handling vulnerability in Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7, 27, and 15.8 allowed attackers to write arbitrary files via malicious archive extraction and has been fixed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84534 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84534.json"
}
],
"title": "CVE-2026-84534"
},
{
"cve": "CVE-2026-84535",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability allowing apps to escape their sandbox was resolved by enhancing state management in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84535 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84535.json"
}
],
"title": "CVE-2026-84535"
},
{
"cve": "CVE-2026-84536",
"notes": [
{
"category": "description",
"text": "An integer underflow vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could cause unexpected system termination when connecting to a malicious SMB server, fixed by improved input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84536 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84536.json"
}
],
"title": "CVE-2026-84536"
},
{
"cve": "CVE-2026-84537",
"notes": [
{
"category": "description",
"text": "A memory handling flaw causing unexpected system termination or kernel memory corruption was resolved in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84537 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84537.json"
}
],
"title": "CVE-2026-84537"
},
{
"cve": "CVE-2026-84538",
"notes": [
{
"category": "description",
"text": "A remote denial-of-service vulnerability was addressed by enhancing input validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84538 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84538.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84538"
},
{
"cve": "CVE-2026-84540",
"notes": [
{
"category": "description",
"text": "An authorization flaw allowing unauthorized app access to sensitive user data was resolved via enhanced state management in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84540 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84540.json"
}
],
"title": "CVE-2026-84540"
},
{
"cve": "CVE-2026-84541",
"notes": [
{
"category": "description",
"text": "An input validation vulnerability allowing unauthorized access to restricted files has been fixed in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 through enhanced input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84541 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84541.json"
}
],
"title": "CVE-2026-84541"
},
{
"cve": "CVE-2026-84543",
"notes": [
{
"category": "description",
"text": "An out-of-bounds access vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 related to SMB server connections has been fixed through enhanced bounds checking to prevent system crashes and kernel memory corruption.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84543 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84543.json"
}
],
"title": "CVE-2026-84543"
},
{
"cve": "CVE-2026-84544",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 that could cause system crashes or kernel memory corruption when connecting to a malicious NFS server has been fixed via improved input validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84544 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84544.json"
}
],
"title": "CVE-2026-84544"
},
{
"cve": "CVE-2026-84546",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing memory corruption when processing malicious 3D models has been fixed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84546 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84546.json"
}
],
"title": "CVE-2026-84546"
},
{
"cve": "CVE-2026-84548",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability causing out-of-bounds reads in maliciously crafted documents was addressed via improved input validation in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84548 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84548.json"
}
],
"title": "CVE-2026-84548"
},
{
"cve": "CVE-2026-84549",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 could cause system crashes or kernel memory corruption when connecting to a malicious NFS server, fixed by improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84549 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84549.json"
}
],
"title": "CVE-2026-84549"
},
{
"cve": "CVE-2026-84550",
"notes": [
{
"category": "description",
"text": "A race condition vulnerability causing unexpected system termination was resolved through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84550 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84550.json"
}
],
"title": "CVE-2026-84550"
},
{
"cve": "CVE-2026-84551",
"notes": [
{
"category": "description",
"text": "A logic flaw enabling apps to bypass network restrictions was resolved through enhanced validation in iOS 27, iPadOS 27, macOS Golden Gate 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84551 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84551.json"
}
],
"title": "CVE-2026-84551"
},
{
"cve": "CVE-2026-84552",
"notes": [
{
"category": "description",
"text": "A memory handling issue causing unexpected system termination was resolved in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84552 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84552.json"
}
],
"title": "CVE-2026-84552"
},
{
"cve": "CVE-2026-84553",
"notes": [
{
"category": "description",
"text": "A resource exhaustion vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by improving input validation to prevent remote denial-of-service attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84553 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84553.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84553"
},
{
"cve": "CVE-2026-84554",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "description",
"text": "An integer overflow vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by enhancing input validation to prevent denial-of-service attacks by privileged network attackers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84554 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84554.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84554"
},
{
"cve": "CVE-2026-84555",
"notes": [
{
"category": "description",
"text": "An authorization flaw allowing unauthorized access to sensitive user data was resolved through enhanced access control in macOS Golden Gate 27 and macOS Sequoia 15.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84555 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84555.json"
}
],
"title": "CVE-2026-84555"
},
{
"cve": "CVE-2026-84556",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved through enhanced access control in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84556 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84556.json"
}
],
"title": "CVE-2026-84556"
},
{
"cve": "CVE-2026-84558",
"notes": [
{
"category": "description",
"text": "A double free vulnerability in macOS Golden Gate 27 was resolved by enhancing memory management to prevent unexpected system termination.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84558 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84558.json"
}
],
"title": "CVE-2026-84558"
},
{
"cve": "CVE-2026-84559",
"notes": [
{
"category": "description",
"text": "A permissions validation flaw allowing unauthorized access to restricted files was resolved in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through enhanced validation mechanisms.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84559 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84559.json"
}
],
"title": "CVE-2026-84559"
},
{
"cve": "CVE-2026-84560",
"notes": [
{
"category": "description",
"text": "An authorization flaw allowing potential unauthorized Bluetooth access was resolved by enhancing state management in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84560 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84560.json"
}
],
"title": "CVE-2026-84560"
},
{
"cve": "CVE-2026-84561",
"notes": [
{
"category": "description",
"text": "A double free vulnerability causing potential system termination or kernel memory corruption was resolved in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates through enhanced memory management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84561 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84561.json"
}
],
"title": "CVE-2026-84561"
},
{
"cve": "CVE-2026-84563",
"notes": [
{
"category": "description",
"text": "A logic flaw causing unexpected system termination in certain macOS versions has been resolved through enhanced validation checks in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84563 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84563.json"
}
],
"title": "CVE-2026-84563"
},
{
"cve": "CVE-2026-84564",
"notes": [
{
"category": "description",
"text": "An uninitialized memory vulnerability in image processing was resolved across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates, preventing potential process memory disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84564 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84564.json"
}
],
"title": "CVE-2026-84564"
},
{
"cve": "CVE-2026-84565",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability causing unexpected application termination when processing malicious disk images was addressed through improved bounds checking in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84565 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84565.json"
}
],
"title": "CVE-2026-84565"
},
{
"cve": "CVE-2026-84566",
"notes": [
{
"category": "description",
"text": "A memory handling vulnerability allowing local attackers to cause system termination or kernel memory corruption has been addressed in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84566 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84566.json"
}
],
"title": "CVE-2026-84566"
},
{
"cve": "CVE-2026-84567",
"notes": [
{
"category": "description",
"text": "A memory handling issue causing unexpected system termination was resolved in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84567 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84567.json"
}
],
"title": "CVE-2026-84567"
},
{
"cve": "CVE-2026-84568",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "A path traversal vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 allowed attackers controlling a network directory server to execute arbitrary code with root privileges, fixed by enhanced path validation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84568 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84568.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84568"
},
{
"cve": "CVE-2026-84569",
"notes": [
{
"category": "description",
"text": "macOS Golden Gate 27 addressed an access control vulnerability by implementing sandbox restrictions on system pasteboards to prevent unauthorized applications from accessing sensitive user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84569 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84569.json"
}
],
"title": "CVE-2026-84569"
},
{
"cve": "CVE-2026-84570",
"notes": [
{
"category": "description",
"text": "A logic flaw allowing applications to bypass Gatekeeper checks was resolved through enhanced verification mechanisms in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84570 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84570.json"
}
],
"title": "CVE-2026-84570"
},
{
"cve": "CVE-2026-84571",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability causing unexpected app termination when processing malicious images has been fixed with improved bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84571 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84571.json"
}
],
"title": "CVE-2026-84571"
},
{
"cve": "CVE-2026-84572",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was addressed by enhancing bounds checking to prevent system termination or kernel memory exposure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84572 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84572.json"
}
],
"title": "CVE-2026-84572"
},
{
"cve": "CVE-2026-84573",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84573 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84573.json"
}
],
"title": "CVE-2026-84573"
},
{
"cve": "CVE-2026-84574",
"notes": [
{
"category": "description",
"text": "A permissions bypass issue affecting macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 was resolved by enhancing state management to enforce Privacy preferences.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84574 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84574.json"
}
],
"title": "CVE-2026-84574"
},
{
"cve": "CVE-2026-84575",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing unexpected app termination when processing malicious files has been fixed with improved bounds checking across multiple Apple operating systems including iOS 27 and macOS variants.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84575 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84575.json"
}
],
"title": "CVE-2026-84575"
},
{
"cve": "CVE-2026-84576",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing unauthorized access to sensitive user data was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84576 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84576.json"
}
],
"title": "CVE-2026-84576"
},
{
"cve": "CVE-2026-84577",
"notes": [
{
"category": "description",
"text": "An access issue in macOS Golden Gate 27 and macOS Tahoe 26.7 allowed an app to potentially bypass sandbox restrictions, which was addressed by implementing additional sandbox constraints.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84577 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84577.json"
}
],
"title": "CVE-2026-84577"
},
{
"cve": "CVE-2026-84578",
"notes": [
{
"category": "description",
"text": "A logic flaw enabling an application to escape its sandbox was resolved through enhanced validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84578 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84578.json"
}
],
"title": "CVE-2026-84578"
},
{
"cve": "CVE-2026-84580",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing an application to escape its sandbox environment was addressed through enhanced validation checks in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84580 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84580.json"
}
],
"title": "CVE-2026-84580"
},
{
"cve": "CVE-2026-84581",
"notes": [
{
"category": "description",
"text": "A buffer overflow vulnerability causing system crashes or kernel memory corruption when mounting malicious disk images has been fixed in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 through improved bounds checking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84581 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84581.json"
}
],
"title": "CVE-2026-84581"
},
{
"cve": "CVE-2026-84583",
"notes": [
{
"category": "description",
"text": "A permissions issue allowing local apps to read a persistent account identifier was fixed by adding restrictions across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84583 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84583.json"
}
],
"title": "CVE-2026-84583"
},
{
"cve": "CVE-2026-84584",
"notes": [
{
"category": "description",
"text": "Improved handling of symbolic links in macOS Golden Gate 27 prevents applications from escaping their sandbox environment, enhancing system security.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84584 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84584.json"
}
],
"title": "CVE-2026-84584"
},
{
"cve": "CVE-2026-84585",
"notes": [
{
"category": "description",
"text": "macOS Golden Gate 27 addressed a permissions vulnerability that allowed applications to access local network devices without user consent by enhancing state management controls.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84585 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84585.json"
}
],
"title": "CVE-2026-84585"
},
{
"cve": "CVE-2026-84586",
"notes": [
{
"category": "description",
"text": "An information disclosure vulnerability in macOS Golden Gate 27 and watchOS 27 was resolved by improving state management to prevent malicious applications from leaking sensitive user information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84586 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84586.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84586"
},
{
"cve": "CVE-2026-84587",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing unauthorized app access to protected user data was resolved with enhanced restrictions in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84587 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84587.json"
}
],
"title": "CVE-2026-84587"
},
{
"cve": "CVE-2026-84588",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "A memory corruption vulnerability in macOS Golden Gate 27 was addressed by removing vulnerable code that could cause system crashes or kernel memory corruption when mounting malicious disk images.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84588 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84588.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84588"
},
{
"cve": "CVE-2026-84589",
"notes": [
{
"category": "description",
"text": "macOS Golden Gate 27 addressed a permissions vulnerability that allowed an application to modify Privacy preferences by implementing additional restrictions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84589 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84589.json"
}
],
"title": "CVE-2026-84589"
},
{
"cve": "CVE-2026-84596",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "An out-of-bounds read vulnerability in font processing that could disclose process memory has been fixed with enhanced bounds checking in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84596 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84596.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84596"
},
{
"cve": "CVE-2026-84597",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "An out-of-bounds read vulnerability in font processing was addressed by Apple through enhanced input validation across iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27, preventing potential memory disclosure.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84597 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84597.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84597"
},
{
"cve": "CVE-2026-84600",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability in Apple operating systems allowed malicious shortcuts to send messages without user confirmation, fixed via improved state management in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84600 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84600.json"
}
],
"title": "CVE-2026-84600"
},
{
"cve": "CVE-2026-84601",
"notes": [
{
"category": "description",
"text": "A permissions issue in macOS Golden Gate 27 allowed apps to bypass Apple Intelligence security prompts, which was resolved through improved state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84601 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84601.json"
}
],
"title": "CVE-2026-84601"
},
{
"cve": "CVE-2026-84602",
"notes": [
{
"category": "description",
"text": "A type confusion vulnerability causing unexpected system termination was addressed through enhanced checks in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84602 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84602.json"
}
],
"title": "CVE-2026-84602"
},
{
"cve": "CVE-2026-84606",
"notes": [
{
"category": "description",
"text": "Apple has resolved a privacy vulnerability in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 that previously allowed apps to identify users across reinstalls by improving identifier management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84606 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84606.json"
}
],
"title": "CVE-2026-84606"
},
{
"cve": "CVE-2026-84607",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "A race condition vulnerability was fixed through improved state management across multiple OS versions, preventing sandboxed applications from executing arbitrary code with kernel privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84607 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84607.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84607"
},
{
"cve": "CVE-2026-84609",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing applications to modify protected system files was resolved via enhanced path validation across multiple Apple operating systems including iOS 27, macOS variants, and others.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84609 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84609.json"
}
],
"title": "CVE-2026-84609"
},
{
"cve": "CVE-2026-84611",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing memory corruption when processing malicious 3D models has been fixed in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84611 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84611.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84611"
},
{
"cve": "CVE-2026-84612",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability allowing unauthorized access to persistent device identifiers was resolved across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and 15.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84612 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84612.json"
}
],
"title": "CVE-2026-84612"
},
{
"cve": "CVE-2026-84616",
"notes": [
{
"category": "description",
"text": "A type confusion vulnerability causing potential unexpected system termination was fixed by improving memory handling across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and 15.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84616 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84616.json"
}
],
"title": "CVE-2026-84616"
},
{
"cve": "CVE-2026-84617",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "An authorization vulnerability allowing unauthorized access to sensitive user data was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, and tvOS versions 26.7, 27, and 15.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84617 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84617.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84617"
},
{
"cve": "CVE-2026-84618",
"notes": [
{
"category": "description",
"text": "A permissions validation issue allowing unauthorized app access to sensitive user data was resolved in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84618 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84618.json"
}
],
"title": "CVE-2026-84618"
},
{
"cve": "CVE-2026-84619",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing potential system termination or kernel memory corruption was addressed through enhanced bounds checking in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84619 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84619.json"
}
],
"title": "CVE-2026-84619"
},
{
"cve": "CVE-2026-84620",
"notes": [
{
"category": "description",
"text": "An integer overflow vulnerability causing memory corruption when processing malicious 3D models was fixed via improved input validation in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84620 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84620.json"
}
],
"title": "CVE-2026-84620"
},
{
"cve": "CVE-2026-84621",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability allowing unauthorized app access to sensitive user data was resolved in iOS 26.7 and 27, iPadOS 26.7 and 27, and multiple macOS versions including Golden Gate 27, Sequoia 15.8, and Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84621 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84621.json"
}
],
"title": "CVE-2026-84621"
},
{
"cve": "CVE-2026-84622",
"notes": [
{
"category": "description",
"text": "A memory initialization vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7 and 27 allowed apps with root privileges to read uninitialized kernel memory and has been fixed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84622 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84622.json"
}
],
"title": "CVE-2026-84622"
},
{
"cve": "CVE-2026-84624",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing sandboxed applications to access restricted files was resolved via enhanced path validation in multiple Apple operating systems including iOS, iPadOS, macOS, and visionOS versions 26.7, 27, and related releases.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84624 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84624.json"
}
],
"title": "CVE-2026-84624"
},
{
"cve": "CVE-2026-84625",
"notes": [
{
"category": "description",
"text": "Apple fixed a permissions vulnerability that allowed apps to fingerprint users by implementing additional sandbox restrictions across iOS 27, iPadOS 27, macOS Golden Gate 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84625 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84625.json"
}
],
"title": "CVE-2026-84625"
},
{
"cve": "CVE-2026-84626",
"notes": [
{
"category": "description",
"text": "An information disclosure vulnerability in Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS was addressed by improving state management to prevent apps from identifying other installed applications.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84626 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84626.json"
}
],
"title": "CVE-2026-84626"
},
{
"cve": "CVE-2026-84628",
"notes": [
{
"category": "description",
"text": "An authorization vulnerability allowing sandboxed applications to access the System Keychain was resolved by enhancing state management in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84628 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84628.json"
}
],
"title": "CVE-2026-84628"
},
{
"cve": "CVE-2026-84630",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "other",
"text": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"title": "CWE-362"
},
{
"category": "description",
"text": "A race condition vulnerability causing potential unexpected system termination was resolved through enhanced state management across multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84630 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84630.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84630"
},
{
"cve": "CVE-2026-84631",
"cwe": {
"id": "CWE-280",
"name": "Improper Handling of Insufficient Permissions or Privileges"
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Insufficient Permissions or Privileges",
"title": "CWE-280"
},
{
"category": "description",
"text": "macOS Golden Gate 27 addressed a security flaw by implementing additional entitlement checks to prevent applications from gaining unauthorized root privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84631 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84631.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-84631"
},
{
"cve": "CVE-2026-84632",
"notes": [
{
"category": "description",
"text": "A memory corruption vulnerability in multiple Apple operating systems was addressed by enhancing memory handling when processing maliciously crafted 3D models in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS versions 26.7, 27, and related updates.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84632 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84632.json"
}
],
"title": "CVE-2026-84632"
},
{
"cve": "CVE-2026-84635",
"notes": [
{
"category": "description",
"text": "A logic issue in state management was fixed across multiple Apple operating systems to prevent unexpected process termination triggered by malicious web content.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-84635 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-84635.json"
}
],
"title": "CVE-2026-84635"
},
{
"cve": "CVE-2026-86869",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability causing unexpected application termination when processing malicious images was addressed through improved bounds checking in iOS 26.7, iPadOS 26.7, and macOS Golden Gate 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86869 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86869.json"
}
],
"title": "CVE-2026-86869"
},
{
"cve": "CVE-2026-86870",
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability causing unexpected app termination when processing malicious files has been fixed with improved bounds checking in multiple Apple operating systems including iOS, iPadOS, macOS Golden Gate, visionOS, and watchOS versions 26.7 and 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86870 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86870.json"
}
],
"title": "CVE-2026-86870"
},
{
"cve": "CVE-2026-86876",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability was addressed by enhancing bounds checking to prevent sandboxed processes from bypassing sandbox restrictions across multiple operating system versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86876 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86876.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-86876"
},
{
"cve": "CVE-2026-86881",
"notes": [
{
"category": "description",
"text": "Apple implemented an improved certificate validation fix across multiple operating systems to prevent attackers with compromised intermediate certificate authorities from issuing certificates with arbitrary extended key usages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86881 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86881.json"
}
],
"title": "CVE-2026-86881"
},
{
"cve": "CVE-2026-86882",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "description",
"text": "An out-of-bounds write vulnerability in multiple Apple OS versions was fixed by enhancing bounds checking to prevent unexpected process termination caused by maliciously crafted images.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86882 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86882.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-86882"
},
{
"cve": "CVE-2026-86884",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing unauthorized app access to sensitive user data was addressed with enhanced restrictions in iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86884 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86884.json"
}
],
"title": "CVE-2026-86884"
},
{
"cve": "CVE-2026-86888",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing local applications to read a persistent account identifier was resolved with enhanced restrictions across multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86888 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86888.json"
}
],
"title": "CVE-2026-86888"
},
{
"cve": "CVE-2026-86889",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Certificate Validation",
"title": "CWE-295"
},
{
"category": "description",
"text": "An improved certificate validation fix in macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 addresses a vulnerability that could allow an attacker in a privileged network position to intercept network traffic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86889 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86889.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-86889"
},
{
"cve": "CVE-2026-86891",
"notes": [
{
"category": "description",
"text": "An authorization issue allowing unauthorized app access to Bluetooth device information was resolved through improved state management in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86891 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86891.json"
}
],
"title": "CVE-2026-86891"
},
{
"cve": "CVE-2026-86894",
"notes": [
{
"category": "description",
"text": "An issue in macOS Golden Gate 27 that allowed applications to escape their sandbox was resolved through enhanced validation checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86894 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86894.json"
}
],
"title": "CVE-2026-86894"
},
{
"cve": "CVE-2026-86897",
"notes": [
{
"category": "description",
"text": "Additional entitlement checks were implemented in Safari 27, iOS 26.7 and 27, iPadOS 26.7 and 27, macOS Golden Gate 27, and visionOS 27 to prevent apps from potentially accessing sensitive user data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86897 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86897.json"
}
],
"title": "CVE-2026-86897"
},
{
"cve": "CVE-2026-86898",
"notes": [
{
"category": "description",
"text": "A logic issue in Safari 27, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 was fixed by improving state management to prevent universal cross-site scripting triggered by maliciously crafted webarchive files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86898 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86898.json"
}
],
"title": "CVE-2026-86898"
},
{
"cve": "CVE-2026-86900",
"notes": [
{
"category": "description",
"text": "An out-of-bounds read vulnerability in macOS Golden Gate 27 related to mounting a maliciously crafted exFAT volume was fixed by improving input validation to prevent system crashes and kernel memory leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86900 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86900.json"
}
],
"title": "CVE-2026-86900"
},
{
"cve": "CVE-2026-86901",
"notes": [
{
"category": "description",
"text": "An out-of-bounds write vulnerability in macOS Golden Gate 27 related to mounting malicious exFAT volumes has been fixed by implementing improved bounds checking to prevent system crashes and kernel memory leaks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86901 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86901.json"
}
],
"title": "CVE-2026-86901"
},
{
"cve": "CVE-2026-86902",
"notes": [
{
"category": "description",
"text": "A directory path parsing vulnerability allowing unauthorized access to sensitive user data was resolved through enhanced path validation in macOS Golden Gate 27 and macOS Sonoma 14.8.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86902 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86902.json"
}
],
"title": "CVE-2026-86902"
},
{
"cve": "CVE-2026-86903",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "description",
"text": "An out-of-bounds read vulnerability allowing disclosure of kernel memory was addressed via improved input validation in multiple Apple operating systems including iOS 27, iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, and watchOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86903 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86903.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-86903"
},
{
"cve": "CVE-2026-86905",
"notes": [
{
"category": "description",
"text": "A vulnerability allowing an app to delete credentials stored in Keychain was resolved by removing the vulnerable code in iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86905 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86905.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-86905"
},
{
"cve": "CVE-2026-86909",
"notes": [
{
"category": "description",
"text": "A logic flaw in macOS Golden Gate 27 allowed applications to bypass Gatekeeper checks, which was resolved by enhancing state management within the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86909 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86909.json"
}
],
"title": "CVE-2026-86909"
},
{
"cve": "CVE-2026-86910",
"notes": [
{
"category": "description",
"text": "A permissions vulnerability allowing potential unauthorized access to restricted files was resolved by enhancing path validation in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86910 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86910.json"
}
],
"title": "CVE-2026-86910"
},
{
"cve": "CVE-2026-86911",
"notes": [
{
"category": "description",
"text": "macOS Golden Gate 27 addressed a security issue where a malicious application could bypass clickjacking protections for secure prompts by implementing improved state management.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86911 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86911.json"
}
],
"title": "CVE-2026-86911"
},
{
"cve": "CVE-2026-86917",
"cwe": {
"id": "CWE-280",
"name": "Improper Handling of Insufficient Permissions or Privileges"
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Insufficient Permissions or Privileges",
"title": "CWE-280"
},
{
"category": "description",
"text": "A permissions vulnerability allowing apps to gain root privileges was addressed with enhanced restrictions in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86917 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86917.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
}
],
"title": "CVE-2026-86917"
},
{
"cve": "CVE-2026-86924",
"notes": [
{
"category": "description",
"text": "A memory corruption vulnerability due to insufficient input validation, causing potential unexpected system termination when connecting a malicious accessory, has been fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, and macOS Tahoe 26.7.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3",
"CSAFPID-4"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-86924 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-86924.json"
}
],
"title": "CVE-2026-86924"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…