{"vulnerability": "cve-2026-6540", "sightings": [{"uuid": "73f5a6a9-e0a2-45cb-b760-a6aa7dfcffd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtgrb2dxl62x", "content": "\ud83e\udd16 CISA added 4 critical vulns to its KEV catalog, all actively exploited: CVE-2026-65400 (CVSS 9.8, Apple macOS auth bypass) plus SharePoint, vCenter and Windows IKE flaws.\nhttps://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "creation_timestamp": "2026-08-19T12:47:24.096851Z"}, {"uuid": "f5caf6df-9a8b-4370-94ae-185a834ab847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.\n\nThe shortcomings added to the KEV catalog are listed below -\n\n\n  CVE-2026-65400 (CVSS score: 9.8) - An improper authentication vulnerability impacting Apple macOS that could allow an", "creation_timestamp": "2026-08-19T13:00:39.756096Z"}, {"uuid": "b6806677-266d-4c90-a24d-ac5629e2e6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://gist.github.com/cyberupdates365/afcf4dea21a2af1954ca9bbd5895701b", "content": "# Critical macOS Screen Sharing Vulnerability (CVE-2026-65400) Exploited by Crypto Miners\n\nHackers are actively exploiting a critical macOS screen sharing vulnerability (CVE-2026-65400) to install Monero miners. Learn how to patch your Mac immediately.\n\nThe **macOS screen sharing vulnerability** (CVE-2026-65400) has shattered the assumption that Apple's built-in remote management tools are secure. Every enterprise IT administrator must act now, as tens of thousands of internet-exposed Mac machines are left completely vulnerable to unauthorized root access.\n\nSecurity researchers have confirmed that a critical logic bug in the macOS Screen Sharing daemon allows remote attackers to bypass authentication entirely by manipulating the state machine. Attackers are using this to silently deploy Monero cryptocurrency miners.\n\n\ud83d\udd17 **[Read the Full Technical Breakdown and Fix Guide on CyberUpdates365](https://cyberupdates365.com/macos-screen-sharing-vulnerability/)**", "creation_timestamp": "2026-08-16T12:09:41.290415Z"}, {"uuid": "274f2260-5641-4d90-b756-e194efdae7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/blockchainreport.bsky.social/post/3mt77zxrjht24", "content": "macOS Screen Sharing vulnerability (CVE-2026-65400) exploited. Attackers gained root access via exposed port 5900, deploying Monero miners. Apple released an update Aug 6. If you can't update, disable Screen Sharing ASAP. Stay safe!\n\n#crypto #blockchain #news ", "creation_timestamp": "2026-08-16T12:50:34.804780Z"}, {"uuid": "4309940d-5a01-47fb-bd68-1b5c9c7d12d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtnanrolbg2r", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 27 interactions\nCVE-2026-69836: 27 interactions\nCVE-2026-64849: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-69836: 27 interactions\nCVE-2026-19490: 3 interactions\nCVE-2026-74866: 3 interactions\n", "creation_timestamp": "2026-08-22T02:38:55.796209Z"}, {"uuid": "1cab3419-8ae7-4c89-8a34-0dd35243b611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "96c16751-1b73-43f8-8ab4-831c0a20223d", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://advisories.ncsc.nl/2026/ncsc-2026-0280.html", "content": "", "creation_timestamp": "2026-08-14T09:42:58.106934Z"}, {"uuid": "38b129e5-a077-47f1-b01d-71620584113b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtkqogn7uj2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-65400: 28 interactions\nCVE-2026-59310: 25 interactions\nCVE-2026-43499: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19490: 8 interactions\nCVE-2026-76404: 8 interactions\nCVE-2026-63030: 7 interactions\n", "creation_timestamp": "2026-08-21T02:47:38.298419Z"}, {"uuid": "3adab870-5bce-4134-a10e-21347627df71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117123197717285597", "content": "It is possible to see elevated activities targeting Apple macOS (CVE-2026-65400) https://vuldb.com/vuln/386882/cti", "creation_timestamp": "2026-08-19T16:49:28.789892Z"}, {"uuid": "cfe3725e-0a3a-4e5d-b727-7bbc9e441a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mtj4wx5ahi2t", "content": "In what can only be described as a predictable farce, CISA has added critical flaws across Apple macOS, SharePoint, VMware vCenter, and Microsoft IKE to their exploited list. Enterprises everywhere running these platforms are the lucky targets of bypasses like CVE-2026-65400 and ...\n\nRead full story", "creation_timestamp": "2026-08-20T11:21:49.498691Z"}, {"uuid": "231c35be-7142-406c-adb3-7fd1d7ca23c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtersqf5x52c", "content": "\ud83d\uded1 CVE-2026-65400\nApple macOS\nCVSS 9.8 / EPSS 0% / KEV: No\nTL;DR: An authentication issue was addressed with improved state management. This issue is fixed in ma\u2026\nhttps://cvesentinel.com/report/CVE-2026-65400?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-18T17:51:58.410252Z"}, {"uuid": "0da01ae6-5315-48b2-b82f-dee163da6c0c", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ee40067-b01d-4fde-93f7-5f384afb2252", "content": "", "creation_timestamp": "2026-08-18T18:00:03.476533Z"}, {"uuid": "5517443c-1623-49ca-b508-4cc166789589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/stechtimes.com/post/3mtaw7qforf2w", "content": "CVE-2026-65400 in macOS Screen Sharing was raised to a 9.8 critical score after Dutch officials documented exposed Macs being rooted and used for Monero mining.\n\nThe vulnerability, CVE-2026-65400, is an authentication bypass in Screen Sharing.\n\n#Cybersecurity", "creation_timestamp": "2026-08-17T05:00:10.890886Z"}, {"uuid": "24516cba-5c9b-45ba-a4b8-397306694518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtawdwug4h2c", "content": "Daily IT Security Digest \u2014 2026-08-17\n# Daily IT Security Digest \u2014 2026-08-17\n\n## Top Stories Today\n\n### 1. Apple Patches Actively Exploited macOS Screen Sharing RCE (CVE-2026-65400)\n\nApple released an emergency patch for a critical vulnerability in macOS Screen Sharing that allows remote attackers", "creation_timestamp": "2026-08-17T05:02:31.555485Z"}, {"uuid": "edc9b200-7e01-4507-85ff-34f02b654e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtawdx55n52t", "content": "Daily IT Security Digest \u2014 2026-08-17\nbypass authentication and gain full root access. The flaw was actively exploited by threat actors to mine cryptocurrency, making the update urgent for all Mac users. Apple addressed CVE-2026-65400 without public disclosure prior to the fix, highlighting its", "creation_timestamp": "2026-08-17T05:02:32.018223Z"}, {"uuid": "aa160301-0c4c-4916-b59e-b644741e3414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/pphm_HackerNews/2668", "content": "\ud83d\udd34 Recent macOS Screen Sharing Vulnerability Exploited in Attacks\n\nThreat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers.\n\nThe exploited bug, tracked as CVE-2026-65400, is a high-severity authentication issue in Screen Sharing that allows remote attackers to log in without valid credentials.\n\nApple disclosed the flaw on August 6, when it rolled out fixes in macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, and macOS Sonoma 14.8.9.\n\nRoughly a week later, the Dutch National Cyber Security Centrum (NCSC) warned that in-the-wild exploitation has started, fueled by the existence of a public proof-of-concept (PoC) exploit.", "creation_timestamp": "2026-08-21T23:00:05.602286Z"}, {"uuid": "8637e742-362d-461c-91d5-310223e410eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/pphm_HackerNews/2678", "content": "\ud83d\udd34 Update your Mac: Screen Sharing vulnerability exploited in the wild\n\nThe Dutch National Cyber Security Centre (NCSC) issued a warning after being notified of several incidents where a vulnerability in Apple\u2019s Screen Sharing feature was exploited to install Monero cryptominers.\n\nThe vulnerability, tracked as CVE-2026-65400, was patched by Apple on August 6. It is an authentication-bypass flaw in macOS Screen Sharing that can let an attacker on the network connect without valid credentials.\n\nmacOS\u2019s built-in Screen Sharing service is a remote-control feature commonly associated with port 5900. Successful exploitation can allow a remote attacker on a reachable network to authenticate to the service without legitimate credentials.", "creation_timestamp": "2026-08-21T23:00:05.691506Z"}, {"uuid": "aed5d910-b047-4962-b285-5ef43173d77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/pphm_HackerNews/2658", "content": "\ud83d\udd34 macOS Screen Sharing Flaw Exploited to Deploy Monero Miners\n\nHackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online.\n\nThe Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CVSS score of 9.8), less than two weeks after Apple shipped the fix.\n\nThe bug sits in macOS\u2019s built-in Screen Sharing feature, the remote desktop tool baked into every Mac. Apple\u2019s fix improved how the system manages authentication state, closing a gap that let attackers on the network authenticate to Screen Sharing without valid credentials at all.", "creation_timestamp": "2026-08-21T23:00:05.896870Z"}, {"uuid": "aef29ebe-fef7-4e6f-981e-80c7a0c5fd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/fintwitter.bsky.social/post/3mtb5igo3ss2d", "content": "SECURITY ALERT: CVE-2026-65400 in macOS Screen Sharing is being actively exploited on Macs exposing port 5900. Attackers gained root and installed Monero miners, per NCSC-NL. Apple patched it in Tahoe 26.6.1, Sequoia 15.7.9 and Sonoma 14.8.9. $AAPL", "creation_timestamp": "2026-08-17T07:10:19.061951Z"}, {"uuid": "e70fcf09-832c-4051-9f51-7c296ecc43ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/ftl.invalid-handle.com/post/3mtb5r7rr2l25", "content": "Apple issued security patches for macOS to fix CVE-2026-65400, which allowed root access via port 5900. South Korean authorities apprehended 31 Chinese nationals for illegal entry. Alphabet plans to raise A$5 billion via an Australian bond offering. SpiceJet settled disputes with its lessors.", "creation_timestamp": "2026-08-17T07:15:13.504172Z"}, {"uuid": "f5f4a007-109f-421f-aa60-e8c36ab04da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "MISP/b40fe095-0a26-4a4d-999c-dbae607508c0", "content": "", "creation_timestamp": "2026-08-12T12:15:02.152599Z"}, {"uuid": "ef7c7231-be21-4b19-8b1c-0bdb9cd00776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/cKure/16697", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). An Interesting thread \ud83e\uddf5 \n\nhttps://x.com/i/status/2086022794840793454", "creation_timestamp": "2026-08-08T14:00:04.217643Z"}, {"uuid": "a2af50bf-59c7-4526-89eb-7ccd435ce946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtbdowg2my2u", "content": "Threat actors exploit CVE-2026-65400 in macOS Screen Sharing to bypass authentication, gain root access, and deploy Monero cryptominers on exposed systems.\n", "creation_timestamp": "2026-08-17T09:01:19.315120Z"}, {"uuid": "dc9aac40-d47e-4ae9-a016-cf52a5ce9172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mslhpzdgni2x", "content": "CVE-2026-65400: macOS Screen Sharing Authentication Bypass Can Lead to Root-Level Remote\u00a0Access\n\nCVE-2026-65400 affects macOS Screen Sharing. Learn how the authentication flaw works, affected versions,\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-65400-macos-screen-sharing-authentication-bypass/", "creation_timestamp": "2026-08-08T16:14:56.428644Z"}, {"uuid": "87c4ae28-3e21-4923-a4b0-30fb0fd7f6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117110028762160211", "content": "CVE-2026-65400 (HIGH) - macOS Screen Sharing vuln lets remote attackers bypass auth and gain root. Active exploitation seen, mainly on systems with port 5900 open. Patch Tahoe 26.6.1, Sequoia 15.7.9, Sonoma 14.8.9. https://radar.offseq.com/threat/recent-macos-screen-sharing-vulnerability-exploited-in-attacks-6aa0fe0406c5717d #OffSeq #macOS #infosec #vuln", "creation_timestamp": "2026-08-17T09:00:27.037229Z"}, {"uuid": "2c6d2ed8-24e2-43ea-a000-1b88285873e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtbdngc2vv2t", "content": "macOS Screen Sharing HIGH-severity auth bypass (CVE-2026-65400) is being exploited for root access. Update to Tahoe 26.6.1, Sequoia 15.7.9, Sonoma 14.8.9 & restrict port 5900 now. https://radar.offseq.com/threat/recent-macos-screen-sharing-vulnerability-exploited-in-attacks-6aa0fe0406c5717d #OffS...", "creation_timestamp": "2026-08-17T09:00:28.637793Z"}, {"uuid": "b039a4a1-af19-4712-be4a-b8ea01f64a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mtbfb2rgbr2g", "content": "\ud83d\udcf0 Celah macOS Screen Sharing Dieksploitasi untuk Memasang Penambang Monero\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/17/celah-macos-screen-sharing-monero-miner/\n\n#apple #cryptocurrencyMiner #cve #cve-2026-65400 #exploit #keamananSiber #macos #monero #rootAccess #screenShar", "creation_timestamp": "2026-08-17T09:29:21.479279Z"}, {"uuid": "87164bde-c88b-4c9b-b918-4d7d1c573e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3mtbgz26cza2a", "content": "Una falla di macOS che apre la porta al controllo totale dei Mac\nCVE-2026-65400 colpisce Screen Sharing di macOS: bypass dell'autenticazione, accesso root e...\nhttps://www.ilsoftware.it/una-falla-di-macos-che-apre-la-porta-al-controllo-totale-dei-mac/", "creation_timestamp": "2026-08-17T10:00:39.180368Z"}, {"uuid": "aa8fa76f-91e9-45e9-978f-263aad118b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16697", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 PoC for a critical vulnerability in Apple macOS Screen Sharing (CVE-2026-65400). An Interesting thread \ud83e\uddf5 \n\nhttps://x.com/i/status/2086022794840793454", "creation_timestamp": "2026-08-09T00:46:43.068357Z"}, {"uuid": "18141696-aeca-441e-945a-a35ed017476f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mt2lr443mm2v", "content": "\ud83e\udd16 CVE-2026-65400: actively exploited auth bypass in macOS Screen Sharing (VNC). NCSC-NL: attackers gain root, deploy Monero miners on internet-exposed hosts. Patched Aug 6 (Tahoe 26.6.1, Sequoia 15.7.9, Sonoma\u2026", "creation_timestamp": "2026-08-14T16:37:03.824581Z"}, {"uuid": "dbc28cb5-abae-4852-9be8-d54a0cec6bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtbjth7aac2m", "content": "CVE-2026-65400 in macOS Screen Sharing is being exploited to gain unauthorized access and deploy Monero miners, prompting urgent patching across multiple macOS versions.\n", "creation_timestamp": "2026-08-17T10:51:13.380947Z"}, {"uuid": "57dcaaaa-ca99-4ecc-888b-10ca1fbf0489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mtblaprzxu2l", "content": "A high-severity macOS vulnerability, tracked as CVE-2026-65400, allows attackers to execute malicious code and is under active exploitation, as reported by the Netherlands National Cyber Security Centrum. The flaw, rated 7.1/10, affects macOS screen sharing, enabling remote control of the system.", "creation_timestamp": "2026-08-17T11:16:33.262660Z"}, {"uuid": "d5a85247-8d4a-4dc9-8cc4-a356dc2bab45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://bsky.app/profile/nile11.bsky.social/post/3mthbxah7om2y", "content": "Critical macOS Flaw Exploited in Cryptomining Attacks Triggers Emergency Apple Updates\n#alfredoPesoli #cve-2026-65400 #macosSequoia #moneroCryptominingTrojan #ncsc-nl #screenSharing\n#nile1", "creation_timestamp": "2026-08-19T17:46:08.912940Z"}, {"uuid": "b715282c-af3a-4f02-b549-2d820674b899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/bindermichi.bsky.social/post/3mt2skyvnuc27", "content": "Do you know if your screen sharing is on?\n\nAttackers are exploiting a high-severity vulnerability allowing control of your #Mac\n\nCVE-2026-65400\narstechnica.com/security/202...", "creation_timestamp": "2026-08-14T18:38:56.596582Z"}, {"uuid": "e80da068-d875-40ad-940c-03fb4427aeb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/notwhatimeant.bsky.social/post/3mt2tp4zly22j", "content": "\"The vulnerability, tracked as CVE-2026-65400, received a patch from Apple last week.... The vulnerability...stems from a bug in the macOS screen sharing capability, which allows a remote party to view the screen and control the keyboard and mouse while a machine is turned on.\"", "creation_timestamp": "2026-08-14T18:59:07.642279Z"}, {"uuid": "91b91c89-0df4-4577-a2d0-af9942e91c0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/stechtimes.com/post/3mt2tqz4pux25", "content": "CVE-2026-65400, a macOS Screen Sharing vulnerability patched by Apple last week, is now being exploited on systems with port 5900 exposed to the Internet.\n\n#Cybersecurity", "creation_timestamp": "2026-08-14T19:00:11.075125Z"}, {"uuid": "7e41f2f1-6c03-41c0-8dc6-d41ac5c56324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/aidoo-noticias.bsky.social/post/3mt2u4wt52b2m", "content": "Alertan explotaci\u00f3n de CVE-2026-65400 en macOS: si el puerto 5900 est\u00e1 expuesto, atacantes logran root e instalan minero de Monero. Apple ya parch\u00f3 Tahoe/Sequoia/Sonoma. #macOS #Ciberseguridad", "creation_timestamp": "2026-08-14T19:06:52.188213Z"}, {"uuid": "120978f0-c469-4aad-93d3-ddc16ca1e106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtbpi2hhnt2h", "content": "Apple\u304c\u4fee\u6b63\u6e08\u307f\u306emacOS Screen Sharing\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u304c\u60aa\u7528\u3057\u3066\u30af\u30ea\u30d7\u30c8\u30de\u30a4\u30ca\u30fc\u3092\u5c55\u958b\n\nApple macOS\u3067\u6700\u8fd1\u4fee\u6b63\u3055\u308c\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3001\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3066root\u6a29\u9650\u3092\u53d6\u5f97\u3057\u3001\u30af\u30ea\u30d7\u30c8\u30de\u30a4\u30ca\u30fc\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u305f\u3081\u306b\u4f7f\u308f\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002\u30aa\u30e9\u30f3\u30c0\u306e\u56fd\u5bb6\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30bb\u30f3\u30bf\u30fc(NCSC)\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-65400", "creation_timestamp": "2026-08-17T12:32:13.136650Z"}, {"uuid": "4025d37c-0ed9-4e0b-9770-5a5870c5754a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtf3guxbfu2f", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-65400: Apple macOS Improper Authentication Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-65400", "creation_timestamp": "2026-08-18T20:44:18.328352Z"}, {"uuid": "438fe327-a6dc-4514-8d3c-de2054cb19af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html", "content": "A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned.\n\nThe vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to", "creation_timestamp": "2026-08-17T13:00:37.637375Z"}, {"uuid": "3ebd6fbc-7587-49e9-bddd-97aa27516040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtbrgqu7ig2u", "content": "Attackers actively exploit the critical CVE-2026-65400 vulnerability in macOS Screen Sharing. Discover how to protect your Mac from root access and cryptominers.\n\n#macOS #CVE202665400 #ScreenSharing #Vulnerability #Cybersecurity", "creation_timestamp": "2026-08-17T13:07:16.534029Z"}, {"uuid": "29f19e83-fa1f-4299-bc16-005f35522a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/habr_com_news/49030", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-65400, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u041e\u0431\u0449\u0438\u0439 \u044d\u043a\u0440\u0430\u043d\u00bb (Screen Sharing) \u0432\u00a0macOS \u0434\u043b\u044f\u00a0\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 Mac \u0441\u00a0\u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u043e\u0440\u0442\u043e\u043c 5900,\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u00a0\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC\u2011NL).\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Apple #\u041f\u041e", "creation_timestamp": "2026-08-17T14:00:03.830297Z"}, {"uuid": "9cc6de3a-f051-4e5f-9feb-66494689213a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3msppsetssk2i", "content": "Critical security alert for Mac users: Apple just patched a flaw (CVE-2026-65400) that lets attackers take over your system via Screen Sharing without a password. Update to macOS Tahoe 26.6.1, Sonoma or Sequoia immediately.", "creation_timestamp": "2026-08-10T08:50:04.350228Z"}, {"uuid": "2243fef6-bac9-4fab-b2d6-791ff820edb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "MISP/b40fe095-0a26-4a4d-999c-dbae607508c0", "content": "", "creation_timestamp": "2026-08-13T00:15:02.746453Z"}, {"uuid": "51cf3a5d-2cd8-410f-82e9-b5af26c3d80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtc3kqsld522", "content": "~Checkpoint~\nMultiple vendors patch actively exploited critical flaws, while Lazarus and China-linked APTs target defense and government sectors.\n-\nIOCs: CVE-2026-68820, CVE-2026-65400, CVE-2026-71362\n-\n#Ransomware #ThreatIntel #ZeroDay", "creation_timestamp": "2026-08-17T16:08:28.585110Z"}, {"uuid": "3a2af7ec-6a69-421a-84ca-43c83a49879f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av26-823", "content": "", "creation_timestamp": "2026-08-17T16:15:08.033778Z"}, {"uuid": "ca2588cb-d9b0-489a-8906-84c02d7315e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtc3x7tirb2x", "content": "~Cybergcca~\nCanadian Cyber Centre digest: 7 advisories for IBM, Tenable, Dell, MS Edge, Citrix, Apple, SAP with multiple exploited CVEs.\n-\nIOCs: CVE-2026-8451, CVE-2026-8452, CVE-2026-65400\n-\n#PatchNow #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-17T16:15:27.170046Z"}, {"uuid": "bba4291e-3b43-4f18-bbff-bab8b99f1591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2658", "content": "\ud83d\udd34 macOS Screen Sharing Flaw Exploited to Deploy Monero Miners\n\nHackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online.\n\nThe Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CVSS score of 9.8), less than two weeks after Apple shipped the fix.\n\nThe bug sits in macOS\u2019s built-in Screen Sharing feature, the remote desktop tool baked into every Mac. Apple\u2019s fix improved how the system manages authentication state, closing a gap that let attackers on the network authenticate to Screen Sharing without valid credentials at all.", "creation_timestamp": "2026-08-22T00:00:08.507496Z"}, {"uuid": "6ac0082b-5750-492c-a57a-0b0aa5fb0a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2678", "content": "\ud83d\udd34 Update your Mac: Screen Sharing vulnerability exploited in the wild\n\nThe Dutch National Cyber Security Centre (NCSC) issued a warning after being notified of several incidents where a vulnerability in Apple\u2019s Screen Sharing feature was exploited to install Monero cryptominers.\n\nThe vulnerability, tracked as CVE-2026-65400, was patched by Apple on August 6. It is an authentication-bypass flaw in macOS Screen Sharing that can let an attacker on the network connect without valid credentials.\n\nmacOS\u2019s built-in Screen Sharing service is a remote-control feature commonly associated with port 5900. Successful exploitation can allow a remote attacker on a reachable network to authenticate to the service without legitimate credentials.", "creation_timestamp": "2026-08-22T00:00:08.926711Z"}, {"uuid": "0987e940-3e9d-48b6-85bf-76efbe6fd43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://www.cert.dk/news/2026-08-17/Kritisk-macOS-fejl-udnyttes-til-kryptomining", "content": "", "creation_timestamp": "2026-08-17T16:45:03.045623Z"}, {"uuid": "845dcc32-bd81-4fee-86f2-eba3078500cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/edovia.bsky.social/post/3mtc6i5q24s2i", "content": "\u26a0\ufe0f A macOS Screen Sharing vulnerability (CVE-2026-65400) is being actively exploited.\n\nIf you use Screens or another VNC client to remotely access a Mac, update macOS as soon as possible.\n\nblog.edovia.com/CVE-2026-65400\nsupport.apple.com/en-ca/148170", "creation_timestamp": "2026-08-17T17:00:42.665518Z"}, {"uuid": "21f3a654-7b60-4cb7-ae3b-24a45e9af3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/xakep_ru/19894", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS Screen Sharing \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432\n\n\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-65400 \u0432 macOS Screen Sharing. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Mac \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0438 \u0443\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u0430 Monero.\n\nhttps://xakep.ru/2026/08/17/cve-2026-65400/", "creation_timestamp": "2026-08-17T18:00:03.787260Z"}, {"uuid": "b73e1e81-d853-4947-8906-f787752395f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2668", "content": "\ud83d\udd34 Recent macOS Screen Sharing Vulnerability Exploited in Attacks\n\nThreat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers.\n\nThe exploited bug, tracked as CVE-2026-65400, is a high-severity authentication issue in Screen Sharing that allows remote attackers to log in without valid credentials.\n\nApple disclosed the flaw on August 6, when it rolled out fixes in macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, and macOS Sonoma 14.8.9.\n\nRoughly a week later, the Dutch National Cyber Security Centrum (NCSC) warned that in-the-wild exploitation has started, fueled by the existence of a public proof-of-concept (PoC) exploit.", "creation_timestamp": "2026-08-22T00:00:09.067913Z"}, {"uuid": "39bfc9c5-883b-44dc-93c6-07bc50aa6090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mt3lvwimpr2s", "content": "A critical macOS Screen Sharing flaw (CVE-2026-65400) is under active exploitation, giving attackers root access to deploy Monero miners. Apple patched it, but you need to check your network settings to truly protect\u2026\n\nhttps://www.tpp.blog/1x95agj\n\n#cybersecurity #cve202665400 #macosscreensharing", "creation_timestamp": "2026-08-15T02:12:25.587805Z"}, {"uuid": "0ef36075-75d1-4400-a5ed-39fc52dbe296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://bsky.app/profile/nile11.bsky.social/post/3mtchx2d4zk2f", "content": "Port 5900 Flaw Opens Macs to Root-Level Monero Mining Hijacks\n#bitcoin #bitdefender #bnbChain #cve-2026-65400 #ethereum #lummaStealer #macosSequoia15.7.9 #monero #ncsc #port5900 #pythonLibrary #sparkkitty\n#nile1", "creation_timestamp": "2026-08-17T19:50:05.889101Z"}, {"uuid": "620ac9ad-7bc2-4149-a755-7d08cfbff2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/HackerNewscyber/3336", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06a9 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0631\u0645\u0632\u0627\u0631\u0632\n\n \ud83c\udfa4\u0645\u0631\u06a9\u0632 \u0645\u0644\u06cc \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0647\u0644\u0646\u062f \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u0634\u062a\u0631\u0627\u06a9\u200c\u06af\u0630\u0627\u0631\u06cc \u0635\u0641\u062d\u0647 (Screen Sharing) \u0645\u06a9\u200c\u0627\u0648\u0627\u0633\u060c \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0628\u0631\u062e\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u06a9 \u0645\u062a\u0635\u0644 \u0628\u0647 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u0631\u0641\u062a\u0647 \u0648 \u0631\u0648\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0645\u0648\u0646\u0631\u0648 \u0646\u0635\u0628 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-65400 \u067e\u06cc\u0634 \u0627\u0632 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0627\u067e\u0644 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u06f6 \u0627\u0648\u062a \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0634\u0631\u06a9\u062a \u0647\u0627\u0646\u062a\u200c\u0631\u0633 \u0646\u06cc\u0632 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u062f\u0647\u200c\u0647\u0627 \u0647\u0632\u0627\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0628\u0627\u0644\u0642\u0648\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u062e\u0628\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5 \u0634\u062f\u062a \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0627\u0628\u062a\u062f\u0627 \u06f7.\u06f1 \u0627\u0639\u0644\u0627\u0645 \u0634\u062f\u060c \u0627\u0645\u0627 \u0628\u0639\u062f\u0627\u064b \u0628\u0647 \u06f9.\u06f8 \u0627\u0632 \u06f1\u06f0 \u0627\u0641\u0632\u0627\u06cc\u0634 \u06cc\u0627\u0641\u062a. \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u06a9\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u0634\u062a\u0631\u0627\u06a9\u200c\u06af\u0630\u0627\u0631\u06cc \u0635\u0641\u062d\u0647 \u0631\u0648\u06cc \u0622\u0646\u200c\u0647\u0627 \u0641\u0639\u0627\u0644 \u0627\u0633\u062a\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-17T20:00:03.788363Z"}, {"uuid": "079c77d1-f669-493c-b7be-24294846bf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://bsky.app/profile/serena666.bsky.social/post/3mtcm57fsyf2w", "content": "mac cve-2026-65400 is wild, 9.8 cvss for screen sharing root on exposed systems. but tbh, if the worst an attacker does with that kind of power is mine monero, you kinda dodged a bullet.", "creation_timestamp": "2026-08-17T21:05:08.048277Z"}, {"uuid": "5393680a-4344-465e-ae09-d16e4b806614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "Telegram/yH0XhfWqkuNLj6YQvCrDlaRCWGJc-BvLoJvLCEGvyWoy79M", "content": "", "creation_timestamp": "2026-08-19T00:00:26.494380Z"}, {"uuid": "7d2ec43d-a23a-4b9d-adf5-387acdd4a168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/true_secator/8514", "content": "\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 macOS \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u0421\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430\u00bb \u0432 macOS - \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u0441\u0442\u043e\u043b\u043e\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VNC \u0447\u0435\u0440\u0435\u0437 TCP-\u043f\u043e\u0440\u0442 5900.\n\n6 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 Apple\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-65400\u00a0\u0432 macOS Tahoe 26.6.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0433\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e, \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u0440\u0442 5900 \u043e\u0442\u043a\u0440\u044b\u0442 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\nNCSC \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0440\u0442 5900 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NCSC, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b \u043c\u0430\u0439\u043d\u0435\u0440 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b Monero.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c macOS \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-65400: macOS Tahoe 26.6.1, macOS Sequoia 15.7.9 \u0438 macOS Sonoma 14.8.9.\n\n\u0412 \u044d\u0442\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u044b \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0440\u0430\u043d\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nNSCS \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-08-19T00:00:27.411266Z"}, {"uuid": "b933abf5-39d1-46fa-ae0b-ad91247055f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mt44ozw42l2u", "content": "\ud83e\udd16 CVE-2026-65400: auth bypass in macOS Screen Sharing (VNC/5900), actively exploited. NCSC-NL: attackers gained root, deployed a Monero miner. Fixed Aug 6 (Tahoe 26.6.1+).\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-macos-screen-sharing-flaw-to-deploy-monero-miner/", "creation_timestamp": "2026-08-15T07:12:47.627430Z"}, {"uuid": "9740f159-9edc-46ee-a99a-3759e003ac18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/thehackernews/9811", "content": "\u26a0\ufe0f Attackers are exploiting a macOS Screen Sharing flaw to install Monero miners.\n\nCVE-2026-65400 is being abused on multiple Macs exposing port 5900 to the internet. Apple patched the flaw in emergency macOS updates.\n\nWhat you need to know: https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html", "creation_timestamp": "2026-08-15T08:00:03.756961Z"}, {"uuid": "a5c3a65f-78ee-4686-9e19-53c5ff161860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/qubblelabs.com/post/3mtcpwtjqak2f", "content": "Dutch NCSC confirms active exploitation of CVE-2026-65400 \u2014 macOS Screen Sharing auth bypass now 9.8 CVSS after Monero cryptojacking campaigns. Tom's Hardware reports attackers gaining root via remote desktop without credentials.\n\nThe fragility isn't the bug.", "creation_timestamp": "2026-08-17T22:13:09.399659Z"}, {"uuid": "90ca9c7f-eb7d-490a-a28f-134e56b0a100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3mtfjhfrglt2w", "content": "Microsoft Defender is monitoring the active exploitation of the CVE-2026-65400 improper authentication vulnerability on a limited number of macOS devices, with telemetry showing successful root account network sign-ins through Screen Sharing. ", "creation_timestamp": "2026-08-19T00:55:08.055645Z"}, {"uuid": "257b28eb-1703-4fb9-a8fd-466542e63a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://bsky.app/profile/nile11.bsky.social/post/3mtctvm22jj2u", "content": "Apple Patches macOS Authentication Vulnerability That Allowed Remote Screen Hijacks\n#cve-2026-65400 #imacPro #macos14.8.9 #macos15.7.9 #macos26.6.1 #screenSharing\n#nile1", "creation_timestamp": "2026-08-17T23:24:04.069913Z"}, {"uuid": "0c46227d-7237-4dbb-9932-9729eae23e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3msr3sqespx2s", "content": "Apple Patches Mac Screen Sharing Flaw That Could Bypass\u00a0Authentication\n\nApple patched CVE-2026-65400 in macOS Tahoe, Sequoia, and Sonoma after a Screen Sharing flaw allowed authentication without valid credentials. The post Apple Patches Mac Screen Sharing Flaw That Could Bypass Authentication\u2026", "creation_timestamp": "2026-08-10T21:57:41.303365Z"}, {"uuid": "fa243ec9-d6ec-4215-a433-e96d7cea11b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/true_secator/8514", "content": "\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 macOS \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u0421\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430\u00bb \u0432 macOS - \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u0441\u0442\u043e\u043b\u043e\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VNC \u0447\u0435\u0440\u0435\u0437 TCP-\u043f\u043e\u0440\u0442 5900.\n\n6 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 Apple\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-65400\u00a0\u0432 macOS Tahoe 26.6.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0433\u043e\u043b\u043b\u0430\u043d\u0434\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e, \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u0440\u0442 5900 \u043e\u0442\u043a\u0440\u044b\u0442 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\nNCSC \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0440\u0442 5900 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c NCSC, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b \u043c\u0430\u0439\u043d\u0435\u0440 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b Monero.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c macOS \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-65400: macOS Tahoe 26.6.1, macOS Sequoia 15.7.9 \u0438 macOS Sonoma 14.8.9.\n\n\u0412 \u044d\u0442\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u044b \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0440\u0430\u043d\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nNSCS \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-08-18T00:00:08.048395Z"}, {"uuid": "327ef4f4-4e57-4ed6-8a57-42dce73fd458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/habr_com_news/49030", "content": "\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-65400, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u041e\u0431\u0449\u0438\u0439 \u044d\u043a\u0440\u0430\u043d\u00bb (Screen Sharing) \u0432\u00a0macOS \u0434\u043b\u044f\u00a0\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 Mac \u0441\u00a0\u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043f\u043e\u0440\u0442\u043e\u043c 5900,\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u00a0\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC\u2011NL).\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Apple #\u041f\u041e", "creation_timestamp": "2026-08-18T00:00:29.127827Z"}, {"uuid": "934b9f81-51c4-4f15-8c71-3c7e1062539b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/HackerNewscyber/3336", "content": "\u2708\ufe0f\u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06a9 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0631\u0645\u0632\u0627\u0631\u0632\n\n \ud83c\udfa4\u0645\u0631\u06a9\u0632 \u0645\u0644\u06cc \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0647\u0644\u0646\u062f \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u0634\u062a\u0631\u0627\u06a9\u200c\u06af\u0630\u0627\u0631\u06cc \u0635\u0641\u062d\u0647 (Screen Sharing) \u0645\u06a9\u200c\u0627\u0648\u0627\u0633\u060c \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0628\u0631\u062e\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0645\u06a9 \u0645\u062a\u0635\u0644 \u0628\u0647 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u06af\u0631\u0641\u062a\u0647 \u0648 \u0631\u0648\u06cc \u0622\u0646\u200c\u0647\u0627 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0645\u0648\u0646\u0631\u0648 \u0646\u0635\u0628 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-65400 \u067e\u06cc\u0634 \u0627\u0632 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0627\u067e\u0644 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u06f6 \u0627\u0648\u062a \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0634\u0631\u06a9\u062a \u0647\u0627\u0646\u062a\u200c\u0631\u0633 \u0646\u06cc\u0632 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u062f\u0647\u200c\u0647\u0627 \u0647\u0632\u0627\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0628\u0627\u0644\u0642\u0648\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u062e\u0628\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa5 \u0634\u062f\u062a \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0627\u0628\u062a\u062f\u0627 \u06f7.\u06f1 \u0627\u0639\u0644\u0627\u0645 \u0634\u062f\u060c \u0627\u0645\u0627 \u0628\u0639\u062f\u0627\u064b \u0628\u0647 \u06f9.\u06f8 \u0627\u0632 \u06f1\u06f0 \u0627\u0641\u0632\u0627\u06cc\u0634 \u06cc\u0627\u0641\u062a. \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0645\u06a9\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u0634\u062a\u0631\u0627\u06a9\u200c\u06af\u0630\u0627\u0631\u06cc \u0635\u0641\u062d\u0647 \u0631\u0648\u06cc \u0622\u0646\u200c\u0647\u0627 \u0641\u0639\u0627\u0644 \u0627\u0633\u062a\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-18T00:00:11.204882Z"}, {"uuid": "c865f2ed-89e4-4279-8601-68a22236bb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/xakep_ru/19894", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 macOS Screen Sharing \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432\n\n\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-65400 \u0432 macOS Screen Sharing. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Mac \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0438 \u0443\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u0430 Monero.\n\nhttps://xakep.ru/2026/08/17/cve-2026-65400/", "creation_timestamp": "2026-08-18T00:00:12.866950Z"}, {"uuid": "f1a66479-213b-424f-bd54-ff5d9d992d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 43 interactions\nCVE-2026-68820: 31 interactions\nCVE-2026-65400: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19478: 6 interactions\nCVE-2026-43499: 6 interactions\nCVE-2025-62593: 5 interactions\n", "creation_timestamp": "2026-08-19T02:42:36.466453Z"}, {"uuid": "0d01ea0e-4479-4de5-a86b-5e698c9f3ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html", "content": "A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned.\n\nThe vulnerability in question is CVE-2026-65400 (CVSS score: 9.8), a critical authentication issue impacting the Screen Sharing component that could allow an attacker already on the network to", "creation_timestamp": "2026-08-18T01:00:32.301479Z"}, {"uuid": "6aaf480a-766b-4056-ba6f-10e9793bcbd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117050150130082823", "content": "Today's macOS updates fix a vulnerability in Screen Sharing where you don't need credentials to authenticate.  Which is apparently a different vulnerability than the above.CVE-2026-65400", "creation_timestamp": "2026-08-06T19:12:31.723452Z"}, {"uuid": "c409d67c-ec03-45f0-9021-e39c69337b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msgqpugd53h2", "content": "Today's macOS updates fix a vulnerability in Screen Sharing where you don't need credentials to authenticate. Which is apparently a different vulnerability than the above.\nCVE-2026-65400", "creation_timestamp": "2026-08-06T19:12:43.169240Z"}, {"uuid": "abe7795d-e91e-4726-a3ce-6eb338408cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt4kmqxuym2p", "content": "\ud83d\udd34 EXPLOITED\n\nmacOS Screen Sharing has an auth bypass (CVE-2026-65400) that gives a network attacker root with no password.\n\nApple patched it Aug 6; exposed Macs are already being hit to mine Monero.\n\nUpdate now, or turn Screen Sharing off.", "creation_timestamp": "2026-08-15T11:22:03.792519Z"}, {"uuid": "91578ee2-e150-4b3b-a124-24f46d735751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtfrucnfmb2s", "content": "Attackers are exploiting CVE-2026-65400, a critical macOS Screen Sharing auth bypass, to gain root access and deploy Monero miners on Macs with exposed port 5900.\n\n#CVE202665400 #macOS #ScreenSharing #Monero #AppleSecurity", "creation_timestamp": "2026-08-19T03:25:30.678868Z"}, {"uuid": "dc54d96e-c6de-4e97-ac76-3fb1578fd52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtfsf2fyhm2e", "content": "CVE-2026-65400:\u60aa\u7528\u3055\u308c\u308bmacOS\u753b\u9762\u5171\u6709\u306e\u8106\u5f31\u6027\u3001Monero\u30de\u30a4\u30ca\u30fc\u5c55\u958b\u306e\u8e0f\u307f\u53f0\u306b\n\n\u653b\u6483\u8005\u3089\u304c\u3001macOS\u6a19\u6e96\u6a5f\u80fd\u3067\u3042\u308b\u300c\u753b\u9762\u5171\u6709\u300d\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u6709\u52b9\u306a\u8a8d\u8a3c\u60c5\u5831\u3092\u4e00\u5207\u6301\u305f\u305a\u306bMac\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u3078\u30a2\u30af\u30bb\u30b9\u3059\u308b\u653b\u6483\u3092\u958b\u59cb\u3057\u307e\u3057\u305f\u3002\u78ba\u8a8d\u3055\u308c\u305f\u8907\u6570\u306e\u4e8b\u4f8b\u3067\u306f\u3001\u3053\u306e\u4e0d\u6b63\u306a\u63a5\u7d9a\u3092\u78ba\u7acb\u3057\u305f\u653b\u6483\u8005\u304c\u305d\u306e\u5f8croot\u6a29\u9650\u3092\u53d6\u5f97\u3057\u3001Monero\u6697\u53f7\u901a\u8ca8\u30de\u30a4\u30ca\u30fc\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u5224\u660e...", "creation_timestamp": "2026-08-19T03:34:52.667598Z"}, {"uuid": "3905962a-31bb-42ba-acc3-39f3272a8c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/yomimonoid.bsky.social/post/3mtftedocqe23", "content": "MacOS Screen Sharing Flaw CVE-2026-65400 Under Active Attack\n\nCVE-2026-65400 in macOS Screen Sharing is under active exploitation. Attackers log in without a password, gain root, and install a Monero miner. Apple patched on Aug 6. Turn Screen Sharing off unless needed.", "creation_timestamp": "2026-08-19T03:52:23.594670Z"}, {"uuid": "470dcd26-5a03-44f7-a75d-9c121022e353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtd6tqh63a2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 41 interactions\nCVE-2026-59310: 38 interactions\nCVE-2026-65400: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65400: 9 interactions\nCVE-2025-62593: 8 interactions\nCVE-2026-69414: 8 interactions\n", "creation_timestamp": "2026-08-18T02:39:51.045660Z"}, {"uuid": "5830b7d9-0906-4499-93aa-36ecfd4c3a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117099587568889790", "content": "\u26a0\ufe0f Attackers are exploiting a macOS Screen Sharing flaw to install Monero miners.\nCVE-2026-65400 is being abused on multiple Macs exposing port 5900 to the internet. Apple patched the flaw in emergency macOS updates.\nWhat you need to know: https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html", "creation_timestamp": "2026-08-15T12:45:06.377623Z"}, {"uuid": "4f589851-abc9-4f85-848b-637da52153e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "Telegram/_b1bKxip3dnnzIx6g6Nbm-VmH3APJMujQn2xJh3dENaAcg", "content": "", "creation_timestamp": "2026-08-19T23:00:03.909177Z"}, {"uuid": "4b7b5a57-1f51-499d-b405-26e9541f474f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mt4pj4yidz2m", "content": "Mac screen sharing exploit now active\n\nA macOS screen sharing vulnerability (CVE-2026-65400) is under active exploitation, giving attackers root access and installing crypto miners. Dutch officials warned users.\n\nIt quickly went from \"may allow access\" to \"root and miners.\"", "creation_timestamp": "2026-08-15T12:49:30.738850Z"}, {"uuid": "8c3099df-2d57-4520-8d5c-e1c06512f254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "Telegram/FceOUow3OYhZc03pClJWknarfUBxt_Te4_D1CjsW9iAnNg", "content": "", "creation_timestamp": "2026-08-19T23:00:04.887328Z"}, {"uuid": "81621619-e62d-4dbe-a6f0-0aec7cdce69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "Telegram/FceOUow3OYhZc03pClJWknarfUBxt_Te4_D1CjsW9iAnNg", "content": "", "creation_timestamp": "2026-08-20T00:00:06.997897Z"}, {"uuid": "2f93f48b-0768-4798-b130-d7264fb8ed21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "Telegram/_b1bKxip3dnnzIx6g6Nbm-VmH3APJMujQn2xJh3dENaAcg", "content": "", "creation_timestamp": "2026-08-20T00:00:07.082784Z"}, {"uuid": "da21be37-72da-44bc-bf27-74ea7c8efda4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3712", "content": "\u2615 CYBERBRIEFING \u2014 Gioved\u00ec 20 agosto 2026\n\n\u2615 CYBERBRIEFING \u2014 Gioved\u00ec 20 agosto 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \u26a0 IN PRIMO PIANO Falla critica in macOS Screen Sharing gi\u00e0 sfruttata dagli hacker: aggiorna subito il Mac. Una vulnerabilit\u00e0 di authentication bypass (CVE-2026-65400) nel servizio di condiv\u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-08-20", "creation_timestamp": "2026-08-20T21:00:05.055202Z"}, {"uuid": "17a81c10-07dc-4d09-af77-96f2726136c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mssrr2a5sq2y", "content": "\ud83d\udd12 CVE-2026-65400: Apple macOS Screen Sharing authentication bypass\n\nApple released macOS Tahoe 26.6.1 to address a critical authentication bypass vulnerability (CVE-2026-65400) in i...\n\nhttps://tinyurl.com/2ymlm3dp #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-08-11T14:03:05.888949Z"}, {"uuid": "7943c67b-56a5-46d5-85bb-ccc0c64f7305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/jqjousatechspanish.bsky.social/post/3mt533ikesc2j", "content": "Falla de Compartir Pantalla de macOS Explotada para Desplegar Mineros de Monero\n\nApple ha lanzado actualizaciones de seguridad para parchear una vulnerabilidad cr\u00edtica de d\u00eda cero en su funci\u00f3n de Compartir Pantalla de macOS, rastreada como CVE-2026-65400. Calificada con una puntuaci\u00f3n de...\n\n#Fa...", "creation_timestamp": "2026-08-15T16:16:38.661385Z"}, {"uuid": "5355fb99-5412-459a-a316-1cfbbb750283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/jqjousatechenglish.bsky.social/post/3mt533xata32m", "content": "macOS Screen Sharing Flaw Exploited to Deploy Monero Miners\n\nApple has released security updates to patch a critical zero-day vulnerability in its macOS Screen Sharing feature, tracked as CVE-2026-65400. Rated with a CVSS severity score of 9.8 out of...\n\n#macos #cybersecurity #applepatch #Breakin...", "creation_timestamp": "2026-08-15T16:16:54.199203Z"}, {"uuid": "1a82f83c-eee3-49ce-851c-13fddb4a3e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/jqjousatecharabic.bsky.social/post/3mt53bfrp7v2s", "content": "\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0645\u0634\u0627\u0631\u0643\u0629 \u0634\u0627\u0634\u0629 macOS \u0644\u0646\u0634\u0631 \u0628\u0631\u0627\u0645\u062c \u062a\u0639\u062f\u064a\u0646 Monero\n\n\u0623\u0635\u062f\u0631\u062a Apple \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0644\u0645\u0639\u0627\u0644\u062c\u0629 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062d\u0631\u062c\u0629 \u0645\u0646 \u0646\u0648\u0639 zero-day \u0641\u064a \u0645\u064a\u0632\u0629 \u0645\u0634\u0627\u0631\u0643\u0629 \u0634\u0627\u0634\u0629 macOS\u060c \u0648\u062a\u0645 \u062a\u0639\u0642\u0628\u0647\u0627 \u062a\u062d\u062a \u0627\u0644\u0645\u0639\u0631\u0641 CVE-2026-65400. \u0645\u0639 \u062f\u0631\u062c\u0629 \u062e\u0637\u0648\u0631\u0629 CVSS \u062a\u0628\u0644\u063a 9.8 \u0645\u0646 10\u060c \u062a\u0633\u0645\u062d...\n\n#\u0645\u0634\u0627\u0631\u0643\u0629 #macOS #BreakingNewsUSA\n\nFull story: https://jqjo.com/arti...", "creation_timestamp": "2026-08-15T16:19:57.509098Z"}, {"uuid": "a41c9078-ebfa-42b7-9103-a126d73e9be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mt55nuaipj2c", "content": "Here we go again with internet-exposed Mac users learning that leaving port 5900 open invites total strangers to claim root access. The Dutch NCSC flagged CVE-2026-65400 being used in the wild, turning unpatched Apple hardware into unauthorized Monero mining rigs. To shield our p...\n\nRead full story", "creation_timestamp": "2026-08-15T17:02:41.756837Z"}, {"uuid": "82d9f2a7-5403-443e-9d2e-64f596925561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/hashlytics.io/post/3mtg2uel6y52z", "content": "Apple Patches macOS Flaw Exploited for Monero Mining\n\nThe Netherlands' National Cyber Security Centre (NCSC) issued an updated warning on August 12, confirming active exploitation of CVE-2026-65400. Attackers... #macOS", "creation_timestamp": "2026-08-19T06:06:36.628937Z"}, {"uuid": "2448c805-2617-4c75-8b02-87bf8ce7ab4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/biassoraoul.bsky.social/post/3mt5d2t5z322x", "content": "Hackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online.\n\nThe Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CVSS score of 9.8).", "creation_timestamp": "2026-08-15T18:39:27.929410Z"}, {"uuid": "f2336c8e-c8b2-46ff-9b71-8a0268a97164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtdpejgecv26", "content": "Apple security advisory (AV26\n\nThis article focuses heavily on specific software versions, but the core risk lies in the systemic exposure created by an actively exploited vulnerability like CVE-2026-65400, regardless of the specific macOS build. If the exploit targets a foundational component, \u2026", "creation_timestamp": "2026-08-18T07:35:34.133700Z"}, {"uuid": "82fbec0c-1e0e-45a9-b0ef-01d7d1e93249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/aidoo-noticias.bsky.social/post/3mtg6bewhaz27", "content": "Apple lanza parche urgente por CVE-2026-65400 en Compartir pantalla: acceso sin contrase\u00f1a v\u00eda puerto 5900 y explotaci\u00f3n activa. Actualiza macOS y desact\u00edvalo si no lo usas. #Apple #Ciberseguridad", "creation_timestamp": "2026-08-19T07:07:34.715239Z"}, {"uuid": "3b7b021b-9154-4b80-9e4b-3d97b0dcf484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.\n\nThe shortcomings added to the KEV catalog are listed below -\n\n\n  CVE-2026-65400 (CVSS score: 9.8) - An improper authentication vulnerability impacting Apple macOS that could allow an", "creation_timestamp": "2026-08-20T01:00:33.207335Z"}, {"uuid": "5d32a241-afc8-4749-9ffc-32e315b7c181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/index.5news.com.hk.ap.brid.gy/post/3mshh5rb3rx62", "content": "\u860b\u679c\u516c\u53f8\uff08Apple\uff09\u55ba8\u67086\u65e5\u7a81\u767c\u70ba macOS Tahoe\u3001Sequoia \u540c Sonoma \u7cfb\u7d71\u63a8\u51fa\u7dca\u6025\u5b89\u5168\u66f4\u65b0\u3002\u4eca\u6b21\u66f4\u65b0\u4e3b\u8981\u4fee\u5fa9 Screen Sharing\uff08\u87a2\u5e55\u5171\u4eab\uff09\u5605\u56b4\u91cd\u5b89\u5168\u6f0f\u6d1e\uff08CVE-2026-65400\uff09\uff0c\u9632\u6b62\u7db2\u7d61\u653b\u64ca\u8005\u55ba\u7121\u6709\u6548\u6191\u8b49\u4e0b\u767b\u5165\u7cfb\u7d71\u3002\u5b98\u65b9\u5efa\u8b70\u6240\u6709 Mac \u7528\u6236\u5118\u5feb\u66f4\u65b0\u3002", "creation_timestamp": "2026-08-07T01:54:06.695720Z"}, {"uuid": "dbfb9341-e340-4b9d-979c-621abda0e377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "Telegram/yH0XhfWqkuNLj6YQvCrDlaRCWGJc-BvLoJvLCEGvyWoy79M", "content": "", "creation_timestamp": "2026-08-18T10:00:03.826614Z"}, {"uuid": "d310b19c-14de-4d5e-88ff-648b932a329d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/thehackernews/9811", "content": "\u26a0\ufe0f Attackers are exploiting a macOS Screen Sharing flaw to install Monero miners.\n\nCVE-2026-65400 is being abused on multiple Macs exposing port 5900 to the internet. Apple patched the flaw in emergency macOS updates.\n\nWhat you need to know: https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html", "creation_timestamp": "2026-08-16T00:00:48.949426Z"}, {"uuid": "7b776818-e1cb-49dc-9d12-0639848cbbee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mti7up7xcp2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 36 interactions\nCVE-2026-65400: 28 interactions\nCVE-2026-68820: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-65400: 11 interactions\nCVE-2026-33824: 5 interactions\nCVE-2026-6875: 5 interactions\n", "creation_timestamp": "2026-08-20T02:41:35.832941Z"}, {"uuid": "d191d19a-6dcd-4de8-9a03-194e68b8a482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/infosec_ita_notizie/3712", "content": "\u2615 CYBERBRIEFING \u2014 Gioved\u00ec 20 agosto 2026\n\n\u2615 CYBERBRIEFING \u2014 Gioved\u00ec 20 agosto 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \u26a0 IN PRIMO PIANO Falla critica in macOS Screen Sharing gi\u00e0 sfruttata dagli hacker: aggiorna subito il Mac. Una vulnerabilit\u00e0 di authentication bypass (CVE-2026-65400) nel servizio di condiv\u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-08-20", "creation_timestamp": "2026-08-21T00:00:08.578934Z"}, {"uuid": "0ff4aa6c-549f-4300-a853-92d769c181ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 39 interactions\nCVE-2026-59310: 36 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14484: 3 interactions\nCVE-2026-19900: 3 interactions\nCVE-2026-65400: 3 interactions\n", "creation_timestamp": "2026-08-16T02:45:25.145244Z"}, {"uuid": "e2a01365-3b3c-48ce-8c7a-31989b6c5d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mt67nxrh2g23", "content": "CVE-2026-65400: From Patch to Exploit in 4 Hours on macOS Screen Sharing", "creation_timestamp": "2026-08-16T03:11:12.931312Z"}, {"uuid": "6e3160f3-a62a-4a96-b0c9-59e843a243a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mt6alxtqvh24", "content": "Macs Under Siege: Active Exploitation of Screen Sharing Flaw Hands Attackers Root\u00a0Access\n\nDutch NCSC reports active exploitation of CVE-2026-65400 in macOS Screen Sharing. Attackers gain root access without credentials on exposed port 5900 systems and deploy Monero miners. Apple patched in August\u2026", "creation_timestamp": "2026-08-16T03:28:00.053173Z"}, {"uuid": "a9591985-0431-463b-ad04-c528d0f36207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msiphbhp7t23", "content": "\ud83d\udd17 CVE : CVE-2026-65400", "creation_timestamp": "2026-08-07T13:55:13.208501Z"}, {"uuid": "84ee0f29-d66e-4745-b702-3eddc5d16ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtgnq4op6n2r", "content": "CVE-2026-65400 is trending. Hype score 9, currently #8 on cvemon.\n\nAn authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1. An attacker on the network\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-65400", "creation_timestamp": "2026-08-19T11:44:14.951701Z"}, {"uuid": "34b8edb4-44be-4117-83cd-9edc8864c2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-macos-screen-sharing", "content": "", "creation_timestamp": "2026-08-07T16:15:03.762410Z"}, {"uuid": "97e6493c-3e56-4e8f-b549-b8609c749a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/365tipu.cz/post/3mt6sjo4wwi2e", "content": "Nizozemsk\u00e9 centrum NCSC varuje p\u0159ed aktivn\u00edm zneu\u017e\u00edv\u00e1n\u00edm kritick\u00e9 chyby v syst\u00e9mu sd\u00edlen\u00ed obrazovky macOS (CVE-2026-65400). \u00dato\u010dn\u00edci vyu\u017e\u00edvaj\u00ed port 5900 k z\u00edsk\u00e1n\u00ed root p\u0159\u00edstupu", "creation_timestamp": "2026-08-16T08:48:49.590979Z"}, {"uuid": "3e1b40eb-1200-4f01-8f33-2373bd1dbff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-65400", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117175072902793147", "content": "An AI agent built a working exploit for this macOS flaw in four hours https://thenextweb.com/news/macos-screen-sharing-flaw-cve-2026-65400-monero-miner", "creation_timestamp": "2026-08-28T20:42:01.492587Z"}, {"uuid": "2f5f6501-9724-4517-acdf-6854a7a5d49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99108", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65400-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a panchocosil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 18:23:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only PoC for CVE-2026-65400 \u2014 macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9 / 14.8.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.376546Z"}, {"uuid": "b975837e-0857-4303-a105-a39ac2f08263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99179", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65400\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a acheong08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 08:56:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApple MacOS Screen Sharing Arbitrary File read/write -> RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.693204Z"}, {"uuid": "655e04b1-92e5-4c00-b448-e89fd8c79b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99108", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65400-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a panchocosil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 18:23:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nRead-only PoC for CVE-2026-65400 \u2014 macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 / 15.7.9 / 14.8.9.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.998787Z"}, {"uuid": "30a8c84c-43cd-493a-9e6f-d8d7bb2eeaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99179", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-65400\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a acheong08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 08:56:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nApple MacOS Screen Sharing Arbitrary File read/write -> RCE\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.371712Z"}, {"uuid": "41d29ef3-d242-41d3-84ea-81fbb412b1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtprnacyxk23", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 34 interactions\nCVE-2026-65400: 24 interactions\nCVE-2026-64849: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-16232: 7 interactions\nCVE-2026-69836: 7 interactions\nCVE-2026-50522: 3 interactions\n", "creation_timestamp": "2026-08-23T02:48:10.713308Z"}, {"uuid": "66135468-e3e1-4f90-a5ae-bdc037248192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/critical_bug/1819", "content": "\ud83d\udd25 CVE-2026-65400: Mac \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0434\u043e root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0447\u0435\u0440\u0435\u0437 Screen Sharing\n\n\ud83d\ude31 \u0412 macOS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u041e\u0431\u0449\u0438\u0439 \u044d\u043a\u0440\u0430\u043d\u00bb. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e \u0441\u0435\u0442\u0438 \u2014 \u043f\u0430\u0440\u043e\u043b\u044c, \u043a\u043b\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u0430\u044f \u0443\u0447\u0451\u0442\u043a\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u043d\u044b.\n\nCVSS: 9.8. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \ud83d\udc80\n\n\ud83e\udde0 \u0427\u0442\u043e \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c\n\n\u0417\u0430 Screen Sharing \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 screensharingd, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 RFB/VNC \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0443 5900.\n\n\u0412 CVE-2026-65400 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0430 \u043b\u043e\u0433\u0438\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u044b \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438: \u0434\u0435\u043c\u043e\u043d \u043f\u0443\u0442\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0438 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0438\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0432 \u0441\u0442\u0430\u0442\u0443\u0441 \u00ab\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0439\u0434\u0435\u043d\u0430\u00bb, \u0445\u043e\u0442\u044f \u043f\u0430\u0440\u043e\u043b\u044c \u043d\u0438\u043a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b.\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0438\u043c\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u2014 \u0430 \u043e\u043d\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u044f\u043c\u043e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0432\u0445\u043e\u0434\u0430 \u0432 macOS.\n\n\ud83d\udca5 \u0411\u0435\u0437 \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u2014 \u0431\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\u2014 \u0431\u0435\u0437 \u043e\u0431\u0445\u043e\u0434\u0430 ASLR\n\u2014 \u0431\u0435\u0437 race condition\n\u2014 \u0431\u0435\u0437 \u043f\u0430\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\n\n\u0427\u0438\u0441\u0442\u0430\u044f \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430: \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u2014 \u0438 Mac \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\ud83d\udc51 \u041f\u043e\u0447\u0435\u043c\u0443 \u0441\u0440\u0430\u0437\u0443 root\n\nscreensharingd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u0435 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0443 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430, \u0430 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f: \u0447\u0443\u0436\u0438\u0435 \u0444\u0430\u0439\u043b\u044b, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u0444\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Calif \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0441\u0440\u0430\u0432\u043d\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 macOS 26.6 \u0438 26.6.1, \u2014 \u043d\u0430 \u044d\u0442\u043e \u0443\u0448\u043b\u043e \u043e\u043a\u043e\u043b\u043e \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u0447\u0430\u0441\u043e\u0432. \u0412\u043e\u0442 \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0438\u043c \u0441\u0442\u0430\u043b\u043e \u043e\u043a\u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043f\u0430\u0442\u0447\u0430 \u0438 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0440\u0443\u0436\u0438\u044f. \u23f1\ufe0f\n\n\ud83d\udea8 \u042d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u0442\u0435\u043e\u0440\u0438\u044f\n\nNCSC \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 Mac \u0441 \u043f\u043e\u0440\u0442\u043e\u043c 5900, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \u0412\u043e \u0432\u0441\u0435\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 root-\u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u043c\u0430\u0439\u043d\u0435\u0440 Monero.\n\nCISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-65400 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441\n\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e:\n\u2014 macOS Tahoe 26.6.1\n\u2014 macOS Sequoia 15.7.9\n\u2014 macOS Sonoma 14.8.9\n\n2\ufe0f\u20e3 \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c Screen Sharing, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f:\n\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u2192 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u2192 \u041e\u0431\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u2192 \u041e\u0431\u0449\u0438\u0439 \u044d\u043a\u0440\u0430\u043d\n\n3\ufe0f\u20e3 \u041d\u0435 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c TCP/5900 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 VPN \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043e\u043c.\n\n\u26a0\ufe0f \u0421\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u043d\u0435 \u0441\u043f\u0430\u0441\u0451\u0442 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0430\u043c \u044d\u0442\u0430\u043f \u0435\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\ud83d\udd17 \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043e\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0435\u043d\u0438\u0435: https://eh.su/reports/cve-2026-65400-mac-mozhno-vzlomat-do-root-bez-parolya-cherez-screen-sharing\n\n#Apple #macOS #CVE #RCE #Root #ScreenSharing #ZeroDay #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-08-25T00:00:05.148647Z"}, {"uuid": "e223cfda-15f0-4e1c-a182-2887e1d939ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/ctsd-gmbh.bsky.social/post/3mtv42w2cha2w", "content": "CVE-2026-65400 in OpenAI Computer History: Risiko f\u00fcr macOS-Flotten\n\nJetzt lesen: https://www.ctsd.de/insights/2026-08-technik-openai-computer-history-risiko-f-r-macos-flotten.html\n\n#ITSecurity #Comp\u2026\n\nhttps://www.ctsd.de/insights/2026-08-technik-openai-computer-history-risiko-f-r-macos-flotten.html", "creation_timestamp": "2026-08-25T05:38:06.061819Z"}, {"uuid": "d3531042-5e2f-4cbc-b525-11a1820492f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mu3luvfefi2g", "content": "\u26a0\ufe0f\ud83d\udcbb  Mac flaw exploited\n\nCVE-2026-65400 gives root access on exposed Macs; attackers deploy #Monero miners.\n\n\ud83d\udd17 read more: www.resecurity.com/b...\n\n#ransomNews #cyberthreats #macOS \n", "creation_timestamp": "2026-08-27T19:37:02.209609Z"}, {"uuid": "10b3e18a-64fd-45ee-9760-db5345b7f403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/thehackernews/9839", "content": "\ud83d\udea8 Four Critical Flaws Under Active Exploitation:\n\n\u2022 macOS CVE-2026-65400\n\u2022 SharePoint CVE-2026-55040\n\u2022 vCenter CVE-2026-59310\n\u2022 Microsoft IKE CVE-2026-33824\n\nReported attacks include Monero mining, persistent access, and Babuk-derived ransomware.\n\nRead: https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "creation_timestamp": "2026-08-23T20:00:06.466524Z"}, {"uuid": "436b90a2-53a2-495c-aa0b-47a7ceb3ae5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/thehackernews/9839", "content": "\ud83d\udea8 Four Critical Flaws Under Active Exploitation:\n\n\u2022 macOS CVE-2026-65400\n\u2022 SharePoint CVE-2026-55040\n\u2022 vCenter CVE-2026-59310\n\u2022 Microsoft IKE CVE-2026-33824\n\nReported attacks include Monero mining, persistent access, and Babuk-derived ransomware.\n\nRead: https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html", "creation_timestamp": "2026-08-24T00:00:04.672428Z"}, {"uuid": "2fa8cc08-992d-41c1-8521-778b4833f2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mu54ut4msa2i", "content": "CVE-2026-65400: macOS Screen Sharing\u3001\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u4e2d\n\n\u30a8\u30b0\u30bc\u30af\u30c6\u30a3\u30d6\u30b5\u30de\u30ea\u30fc CVE-2026-65400\u306f\u3001Apple\u306emacOS Screen Sharing\u30b5\u30fc\u30d3\u30b9\uff08screensharingd\u30c7\u30fc\u30e2\u30f3\u304c\u5b9f\u88c5)\u306b\u5b58\u5728\u3059\u308b\u8a8d\u8a3c\u306e\u554f\u984c\u3067\u3059\u3002Apple\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u306e\u653b\u6483\u8005\u304c\u6709\u52b9\u306a\u8a8d\u8a3c\u60c5\u5831\u3092\u6301\u305f\u305a\u306bScreen...", "creation_timestamp": "2026-08-28T10:13:53.769362Z"}, {"uuid": "16806bf1-3cc3-487c-80a4-b5b5f69d0116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/kapualabs.bsky.social/post/3mudkzxpt422u", "content": "Apple's closed security model is failing Kerckhoffs's test. CVE-2026-65400 Screen Sharing bypass, PCC log redirection & Keychain flaws expose the auth transcript itself. What it means for $AAPL enterprise risk: https://post.kapualabs.com/2p8kbadf #AAPL #cybersecurity", "creation_timestamp": "2026-08-30T23:43:16.906507Z"}, {"uuid": "4013cf52-c4b4-4948-b1be-41dd5e160495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mudzjgdl6w22", "content": "\u26a0\ufe0f CVE-2026-65400: CRITICAL (CVSS 9.8) pre-auth RCE in macOS Screen Sharing (screensharingd, runs as root). Actively exploited \u2014 Monero miners deployed. CISA KEV listed Aug 18. Patch via macOS Tahoe 26.6 / Sonoma 14.8.8 immediately. #CVE #macOS #ZeroDay", "creation_timestamp": "2026-08-31T04:02:27.404411Z"}, {"uuid": "69bb15f8-9b28-403b-a5c5-7314d8abf718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/yewzent.bsky.social/post/3mv35v73otk23", "content": "MacOS\u306e\u8106\u5f31\u6027(CVE-2026-65400)\u306b\u3064\u3044\u3066\u8abf\u3079\u3066\u305f\u3093\u3060\u3051\u3069\u3001NIST\u306e\u30da\u30fc\u30b8\u3092Google\u7ffb\u8a33\u306b\u304b\u3051\u305f\u3089\u3001Vender:Apple \u306e\u8868\u8a18\u304c\u5e7c\u7a1a\u5712\u307f\u305f\u3044\u306b\u53ef\u611b\u304f\u306a\u3063\u3066\u3066\u30db\u30c3\u30b3\u30ea\u3057\u305f\ud83d\ude0a", "creation_timestamp": "2026-09-09T08:51:52.806079Z"}, {"uuid": "33459dc3-7f3e-48b7-b642-9cc885815132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/yewzent.bsky.social/post/3mv35yjvylc23", "content": "MacOS\u306e\u8106\u5f31\u6027(CVE-2026-65400)\u306b\u3064\u3044\u3066\u8abf\u3079\u3066\u305f\u3093\u3060\u3051\u3069\u3001NIST\u306e\u30da\u30fc\u30b8\u3092Google\u7ffb\u8a33\u306b\u304b\u3051\u305f\u3089\u3001Vendor:Apple \u306e\u8868\u8a18\u304c\u5e7c\u7a1a\u5712\u307f\u305f\u3044\u306b\u53ef\u611b\u304f\u306a\u3063\u3066\u3066\u30db\u30c3\u30b3\u30ea\u3057\u305f\ud83d\ude0a", "creation_timestamp": "2026-09-09T08:53:44.980439Z"}, {"uuid": "f6fd9184-511c-4202-9702-5ee24fd2299c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/cyberlifecoach.bsky.social/post/3mv43srodps23", "content": "Your Mac can potentially be compromised without a click or password. CVE-2026-65400 targets macOS Screen Sharing and has been actively exploited. If port 5900 is exposed, attackers can gain root access. I break it down here:\n\ncyberlifecoach.substack.com/p/the-mac-sc...\n\n#Cybersecurity #MacSecurity", "creation_timestamp": "2026-09-09T17:47:24.138296Z"}, {"uuid": "77d119db-ebce-4c3a-a196-25d2f0054930", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9560578e-f0f0-4ccb-8086-e52bc4e93614", "content": "", "creation_timestamp": "2026-09-10T07:10:17.065216Z"}, {"uuid": "f1bec184-6a85-4c40-b28d-4e957cc3d24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:21.295859Z"}, {"uuid": "35d4eda4-6fca-4476-aa39-bb8df5fa9bc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65401", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:22.921516Z"}, {"uuid": "17e6aa68-0b5d-4d5f-a105-7a0cc75baa72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65402", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:24.897238Z"}, {"uuid": "8a285e92-54cc-4d49-820f-06222e60480d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65403", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:26.847691Z"}, {"uuid": "0255de7d-021a-4bb7-9186-1d2751035b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65404", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:29.254886Z"}, {"uuid": "fc3807ab-95bf-4542-b62e-2bf2d2cf7d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65405", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:31.244265Z"}, {"uuid": "cb672f0a-3a22-4296-8d1a-6b3442e82806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65406", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:32.901397Z"}, {"uuid": "5b9c17e2-9a64-48cf-8d6d-4012de595ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65407", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:34.904391Z"}, {"uuid": "78f292f9-6cb9-4be2-92ed-d84daac8f744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65408", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:37.135802Z"}, {"uuid": "a8c0366e-20dc-448a-93c2-9e103c288221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65409", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:48:39.071663Z"}, {"uuid": "c250a7d5-5b8f-48c6-aab8-bb3f5f06d315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:46:30.883869Z"}, {"uuid": "b6873e0b-f9cf-4d74-8707-ab4cedfb14c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65405", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:08.526080Z"}, {"uuid": "a2d17f66-6729-4c53-b949-a2f9291320e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65409", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:16.356113Z"}, {"uuid": "610e17ec-cd15-4319-a74e-7d0acf7e36f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65401", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:00.411542Z"}, {"uuid": "b6b7c9e6-8a16-4e62-8ad5-717a11db6209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65402", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:02.429891Z"}, {"uuid": "ee514ad6-c783-42b7-8407-ad8d46f987a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65403", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:04.401701Z"}, {"uuid": "7fde23bd-099f-4ce7-8576-10e983cdab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65404", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:06.341882Z"}, {"uuid": "deacb3d8-b4bc-4908-ae3a-78222a82d7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65406", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:10.519468Z"}, {"uuid": "23dd3801-bb09-48e3-9991-feccc9aa30f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65407", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:12.467761Z"}, {"uuid": "43041779-e326-4ae9-9eb1-846052624874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65408", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:49:14.414880Z"}, {"uuid": "4a3efd17-285d-4c53-bf0f-0101803f7d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:00:43.202884Z"}, {"uuid": "0ada451f-48ea-44c4-ad41-34f8f41d2de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65401", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:07.655962Z"}, {"uuid": "47f6d605-e2d1-4b19-9d05-1b9aeb34d802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65403", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:44.822367Z"}, {"uuid": "56c7449f-d345-4759-8c5a-af7be61cfec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65408", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:19.995181Z"}, {"uuid": "b0351ae6-d23d-47fe-a7ce-8f32aefb85b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65406", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:22.882035Z"}, {"uuid": "890bc328-4e9c-4dba-a06a-6bfa89b63595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65404", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:03.146198Z"}, {"uuid": "8bd4bb3a-a7e3-4329-a695-d390aa04e4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65407", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:04.649190Z"}, {"uuid": "712e9cbc-dd7c-47ba-bd5f-e7699f194f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65402", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:07.937044Z"}, {"uuid": "ebfc2870-08fa-46a0-85f0-ccff26e60fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65405", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:08.148193Z"}, {"uuid": "8dd71287-555b-40d8-b39d-7a7e79b2bd53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65409", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:06.831502Z"}, {"uuid": "b2250c9c-58b0-4f9c-965a-da48c794258b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65409", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:02.111572Z"}, {"uuid": "f29fd029-5086-4dd5-9f94-8f581edace3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65405", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:03.567516Z"}, {"uuid": "6308e5c2-4b94-4acf-93a2-aff3aa395738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65407", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:00:59.792198Z"}, {"uuid": "794db3b0-f5c7-44c1-a55a-9ecbf556931c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65401", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:02.747095Z"}, {"uuid": "492bfaea-e898-4cf1-b4e7-fb64b95a0915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:00:40.410246Z"}, {"uuid": "4309c717-9943-4331-8ea2-1c239f892d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65402", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:02.966012Z"}, {"uuid": "332b029f-940a-4c17-8dfd-e369e36be56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65406", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:18.593281Z"}, {"uuid": "cb697956-0cd4-4db4-9590-4b5d44c0287d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65404", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:00:59.157984Z"}, {"uuid": "ecbcc5f4-cbec-402f-8c3d-099fef37b1d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65408", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:15.854857Z"}, {"uuid": "3b419eb2-8a14-4e62-8302-928f6a03b09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65403", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:35.809455Z"}, {"uuid": "42f7c5aa-f9e3-4e91-947f-74dbb80d1b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://t.me/VulnerabilityNews/44043", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog   \n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability\nCVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability\nCVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability \u00a0\nCVE-2026-65400 Apple macOS Improper Authentication Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T12:00:06.813438Z"}, {"uuid": "1a088e95-2e8d-45df-8f95-4753910b1b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44043", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog   \n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. \u00a0\nCVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability\nCVE-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability\nCVE-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability \u00a0\nCVE-2026-65400 Apple macOS Improper Authentication Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-19T00:00:35.101793Z"}, {"uuid": "463849a4-91b1-40c3-a6e1-8ccfbdbb7a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65400", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvw3rook5s26", "content": "macOS\u3001SharePoint\u3001vCenter\u3001\u304a\u3088\u3073Microsoft IKE\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u73fe\u5728\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u706b\u66dc\u65e5\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV \uff09\u30ab\u30bf\u30ed\u30b0\u306b4\u3064\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u3001\u305d\u308c\u3089\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u767a\u8868\u3057\u305f\u3002\n\nKEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f\u6b20\u70b9\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-65400\uff08CVSS\u30b9\u30b3\u30a2\uff1a9.8\uff09 - Apple macOS\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u4e0d\u9069\u5207\u306a\u8a8d\u8a3c\u306e\u8106\u5f31\u6027\u3002\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u306e\u653b\u6483\u8005\u304c\u6709\u52b9\u306a\u8a8d\u8a3c\u60c5\u5831\u306a\u3057\u3067\u753b\u9762\u5171\u6709\u306b\u8a8d\u8a3c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\n...", "creation_timestamp": "2026-09-20T01:56:03.871530Z"}]}